commit 0bd2038c86a6dee3270856c2c1e2dc6a9c6cdee9
Author: Andreas Ahmann <a.ahmann@42i.org>
Date:   Fri Jan 24 16:18:47 2025 +0100

    Public Information

diff --git a/HISTORY.md b/HISTORY.md
new file mode 100644
index 0000000..2e9a7ed
--- /dev/null
+++ b/HISTORY.md
@@ -0,0 +1,409 @@
+# Version History
+
+## February 2025, beta 168
+
+- Remove extra certificate from RMS component
+
+## January 2025, beta 167
+
+- Update to nscale 9.3.1300
+- Added terminationGracePeriodSeconds to all PODs, can now be set with `.terminationGracePeriodSeconds`
+
+## december 2024, beta 166
+
+- the secondary disk is now optional and needs to be enabled with `mounts.disk.enabled: true`.
+- the default mount for the hid is now on the secondary disk. If you have hid enabled, this is a breaking change! Make sure you deal with existing HID files.
+
+## december 2024, beta 164
+
+- Separated the buffers and DA for performance reasons in nstl. The buffers are now stored on a new volume *disk*.
+- Added `/var/crash` to nstl, storing potential crash dumps on pTemp.
+
+## december 2024, beta 163
+
+- Update to nscale 9.3.1202
+- Next to .this.resources, you can now also set .this.sidecarResources and .this.initResources.
+  However, you should not do so unless you know what you are doing.
+
+## december 2024, beta 162
+
+- Changed Resources for Fluentbit Sidecar Container
+
+## december 2024, beta 161
+
+- Added startup probes for all components
+
+## November 2024, beta 160
+
+- Added a startup probe for nstl
+
+## November 2024, beta 159
+
+- Added .instance.stage to identify a stage
+
+## November 2024, beta 158
+
+- Added service.name for Open Telemetry
+
+## Oktober 2024, beta 157
+
+- Latest ERP-Proxy Version by Ceyoniq. This also has been **renamed** to **erpproxy** to match the **eprcmis** connector chart naming
+- First BETA of ERP-CMIS Connector in directory **erpcmis**
+- Added the possibility to add Annotations to Payloads, for the use with OpenTelemetry  
+  Also see [here](https://opentelemetry.io/docs/kubernetes/operator/automatic/)
+- Also added hard coded openTelemetry support for convenience
+- Fixed a bug where the prepper chart waited for post sync in argo deployments
+
+## Oktober 2024, beta 156
+
+- nscale ERP Proxy Chart now available. There is still a bug in this first image by Ceyoniq, so the chart will not bring up a running
+  system yet. But the Values are in, so you can start setting up the instances.
+
+## Oktober 2024, beta 155
+
+- Added the possibility to use configMaps and secrets in the generic mount interface.  
+  Please see the *generic* example for details
+
+## September 2024, release 1.2.1500
+
+- Update to nscale 9.2.1502
+- Added value `logForwarder.db` to set a fully qualified path to the database file, in case you do not want to have it along the logs.  
+  Example:
+  ```
+  logForwarder:
+  - name: Accounting
+    path: "/opt/ceyoniq/nscale-server/storage-layer/accounting/*.csv"
+    db: "/opt/ceyoniq/nscale-server/storage-layer/logsdb/logs.db"
+  ```
+- BASEFOLDER Value Typo corrected in SharePoint. Is now `Values.nappl.baseFolder`
+- The default value for `doInitialCrawl` was a bool. It is now a string `false` which is correct.
+- You can now add any extra Annotation to services and ingresses.
+  Example:
+  ```
+  global:
+    ingress:
+      annotations:
+        nginx.org/proxy-read-timeout: "20s"
+    service:
+      annotations:
+        consul.hashicorp.com/service-sync: "true"
+  ```
+- Add `.this.ingress.proxyReadTimeout` to set this extra annotation to ingress objects
+- Ports can now be disabled in NetworkPolicies, if you use a CNI driver that does not support them.
+  This is especially for the "endPort" Attribute, that is currently not supported by Cilium.
+- Added port 443 to the egress in Network Policies for Pods accessing the K8s API
+- there was a duplicate podDisruptionBudget. Fixed it.
+- Fixed a bug with respect to Volume Names / Static Volumes and Storage Classes
+- Correction of documentation regarding `global.pullSecretOverride` (wrong, missing s) and `global.pullSecretsOverride` (correct)
+- Fixed a bug where PAM could not communication with JOBSNAPPL in a HA scenario
+
+## August 2024, release 1.2.1400
+
+- Fixed bugs regarding KubePing Protocol in Version < 9.1
+
+- Fixed bugs regarding tenant-chart-agro. Be aware: It was the .helmignore after all.
+
+- Added nscale 9.1.1506 to versions and released the chart version to repo
+
+- The Application Chart now waits a minute before executing to prevent race condition problems
+- Setting SERVER_BASE_URL in Application Layer for SAML redirects to work
+- Added Liveness Probes
+
+- Added the possibility to define *PodDisruptionBudgets* for any component.
+
+- Added a readyness probe to postgres
+- reviewed the resource consumption and added better requests and limits. Also see the sample *resources*
+
+- Working on the documentation
+- updated sharepoint chart to meet the latest specs from Ceyoniq
+- Sharepoint Connector is now a StatefulSet
+- SharePoint DoInitialCrawl now defaults to false
+- Changed nstl and sharepoint updateStrategy to OnDelete
+- Update Sharepoint to version 9.2.1400
+
+- Update nscale auf 9.2.1402
+- The nstl HID Check was disabled by default, as it only made sense when using multiple volumes. Now, we habe pTemp since a few builds, so it makes  
+  sense now to store the hid file to pTemp. Therefore a new pTemp directory *hid* has been created to hold this file. The new sample *hid* shows how to turn this feature on.
+- nstl checks the *audit.log* size when starting up. After an update, the log directory on emptydir got deleted when re-creating the new pod. This caused  
+  the audit log to be empty and caused an error. The log directory of nstl has also now moved to pTemp to avoid this.
+- Added *limitations.md* to the docs directory and READMEs
+
+- Update jsonl structure to get AI Support Assistent running
+
+- Health Check des SP Connectors nun auf `/nscale_spc/images/icons/PowerPoint.svg`
+
+- Added *generic mounts* to be able to add any pre provisioned PV to a container. Like a smb, nfs oder cifs share with migration data for pipeliner for example.
+- Moved the nstl cluster service to the nstl chart and made sure the default ports etc. are used correctly
+- Bugfix in domain name
+
+- Adding *Service* configuration section to most components. This section can be used to disable a components service (along with the potential ingress) to  
+  be able to configure cluster services for retrieval (used in the SharePoint scenario). Please see the sharepoint sample for more information
+- Adding a clusterService configuration as an additional option to achieve above goal
+
+- Commented the SharePoint Probe out, because it needs work
+
+- New Instance Group Feature  
+  You can set an alternative `.instance.group` to bundle multiple Instances together. This will allow traffic to be passed beween all instances within this group.  
+  This is ment to be used for large instances that you might want to split up. Please see the `group` sample.
+- Fixed a bug in the resolver, preventing sliced maps to be deepCopied into .this
+
+- Fixed a bug concerning Postgres PullSecrets
+- Added pullSecretsOverride 
+- waitFor can now be turned off if you feel argoWaves are all you need:  
+  ```
+  utils.disableWait: true
+  ```
+- argoCD Waves can now be turned off if you feel waitFor is all you need:  
+  ```
+  utils.disableWave: true
+  ```
+- Added FluentBit:2.0 as default LogForwarder e.g. for the Accounting Log. 
+
+- Changed the default argoCD waves to make sure the prepper runs first
+- Fixed a bug, where the condition of the sharepoint instances were all bound to the same key
+- Adding *Maintenance Mode*, to start pods without starting the service, providing the possibility to gain access to the container to perform recovery tasks that need to be done offline. In order to do this:
+    - All *waitFor* definitions are ignored
+    - All *Health Checks* are ignored
+    - The container starts in idle
+    - Application Jobs are disabled
+  You can put a component, an instance or the whole environment into maintenance.
+- Adding a new values map: `.instance` holding `.instance.version` currently, showing the nscale Version installed (pinning the nappl)
+- Adding downward compatability for `nscaleVersion` and `componentVersion`
+- the *nplus Environment Chart* now has a *prepper* component you can turn on if needed
+- nstore Downloader is now *disabled* by default
+- Renamed Administrator Server aka RMS to *nplus Remote Management Server*  
+  This should show the proximity to the *nscale Remote Management Service* and the idea of using a *virtual Server* for the rich Admin Client
+- worked on Documentation
+- Re-Structuring the Samples Directory
+
+Breaking Changes
+
+- The **storageClass** of a static volume is now set to empty ("") to prevent the PV from being bound to the wrong PVC. We also recommend putting a claimRef into your PV to make sure only the correct PVC can bind to it.  
+  Your PV also has to set the storage class to "" otherwise it will not bind.  
+  see https://kubernetes.io/docs/concepts/storage/persistent-volumes/
+
+- Slicing Environment Chart into Subcharts:
+  The Environment Chart is now an Umbrella Chart. It references the operator, toolbox, dav and backend separately. By that means, you can now also add those charts to the Instance Umbrella Chart with *SIM*
+
+- Adding *SIM* to Instance
+  The *Single Instance Mode* lets you run a single *nplus Instance* in your namespace. The Instance *should* be named after the namespace. You can turn on the environmental components *operator, toolbox, dav and backend* in the Instance chart to get a single chart that brings all it needs
+
+- Excluding "globals" from ArgoCD Values
+  There was a large globals section in the ArgoCD Application, that was unnecessary. It is removed
+
+- Adding *Prepper* as a component to deploy git assets prior to component deployment:
+  Sometimes you need to deploy assets like Web Snippets to the Instance *before* any other component is deployed and initially started. The prepper can be used to download assets from git, extract tarballs and then calling scripts to perform any custom action. The prepper has no waitFor condition, thus running directly after the PVs are created, which happens in the *backend* chart of the environment. *Prepper* ist much like the *Application* Chart, but it of course cannot deploy anything into an Application Layer, as the nappl not yet exists.
+
+- Adding download capability to the Application Chart
+  You can now define downloads, that the Application Chart should perform prior to executing any script or App Installation
+
+- CIFS Mode for File Storage, preventing chmod from being run in scripts, is now *on* by default.
+- Renamed the *nappl* Cluster, if there is no prefix (as in instance name == Release.namespace due to SIM)
+- fixed a bug, where some resources (defaultconfig, networkpolicies, database config, ...) were not created in the release namespace but the default
+
+- Added `includeNamespace`
+  By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+
+Potentially Breaking Changes:
+
+- The former Environment Chart used non-Standard Labels you might have used for your firewall rules. These are now normalized and the new environmental components behave just like any other component.
+
+- Introduced *ptemp* as a persistent temp space, e.g. for the accounting logs or database dumps etc.
+- Accounting in Storage Layer: set `accounting: true` and the csv files will be written to *ptemp*
+
+## July 2024, release 1.2.1303
+
+- customizingMode as new switch in *web*
+- fixed a bug with timezone data
+- Add a key to switch off certificate generation if no issuer is set: createSelfSignedCertificate
+- Added tcps as port with 3006 to nstl
+- Fixed a bug with the resolver in combination with the instance name: Resolving was too late for some
+  String operations.
+- Normalized all examples that no more includes are used in templates (are not necessary any more) and also 
+  single quotes are normalized to double quotes for strings, as we now do not need to use double quotes for the
+  includes any more.
+- Adding nscale Web tls and completing Zerotrust Mode
+- Changed the default of priorityClasses: It is now OFF. See FAQ for documentation
+- global flags and defaults for TZDATA / Timezone setting
+
+Big things:
+
+- An all new Values sub-system:
+  - You can now stage **any** value!
+  - You can now override **any** value on **any** stage!
+  - This also works with your own values for your custom charts
+  - templates used in values are automatically and recursively resolved. This also works with your custom values!
+- Update to nscale 9.2.1302
+- Many cleanups
+
+Breaking Changes:
+
+- new .Values section: *meta*
+- *nscaleVersion* is now in section meta
+- *componentVersion* is now in section meta
+- *ports* is now in section meta
+- *type* is now in section meta
+- *wave* is now in section meta
+- *commercial.tenant* is now in section meta
+- *commercial.provider* is now in section meta
+
+Non breaking Changes:
+
+- *this*  
+    In code, you can now refer to `.this.*` instead of `.Values.*`.
+    *this* is build from .Values (for component values), .Values.global (for instance values) and .Values.global.environment (for environment values) automatically
+- automatic resolver  
+    after condensing the `.Values` into `.this`, a new recursive resolving function now looks for any template used in values and resolves it (using `.this` values)
+- new .Values section: *override*  
+    This section is automatically applied to all .this, overwriting any existing value.
+    *override* is also subject to automativ compression and resolving
+
+- Helper functions are moved from _helper.tpl to a new map in code, accessible via `$.component`.  
+    if you used helper functions in your templates, you need to port them. They are still working, but are depricated.
+
+- *_depricated.tpl* now holds depricated functions. They resolve to the new function / value and are subject for being removed in future majors.
+
+- new debugging mechanism:  
+    You might want to debug your values and functions and helm lacks some important functionality for this, like a callstack.
+    The new debug feature now provides this functionality. You can call `nplus.debug.enter` and `nplus.debug.leave` in your code to 
+    add this functionality to your own definitions.
+- debugging Values:
+    if debugging is enabled, Values are reported in the component custom resource. Just search for `DEBUG` in `helm template` code.
+- to enable debug, set `debug: true` on any level. Example:
+    ```
+    global:
+      environment:
+        utils:
+          debug: true
+    ```
+- debug also adds strict mode, so depricated functions are failing
+
+- *init function*  
+    if you want to use the new functionality (.this, .component, ...) in your template, call `include "nplus.init"` as first line in your code.
+    It initializes automatically
+
+- new .component section with calculated values for you to use in your templates.
+- fixed a bug, where nappl sync wave is after application sync wave (ArgoCD)
+- Sorting and Documenting the default ArgoCD Waves (see quickstart-argo)
+
+Breaking changes:
+
+- renamed nstlIPRange to nstlIpRange
+- In Application Chart, renamed .Values.rs to .Values.rs.host
+- In Application Chart, renamed .Values.nstl to .Values.nstl.host
+- changes in database Values.yaml, please check if you used it
+
+Non breaking changes:
+
+- Added nstlIpRange to the Storage Layer Chart to allow to open egress connections from internal Storage Layer to servers outside the cluster
+- New *defaultConfig* possibility to add default config files to Charts that are used prior to image templates (e.g. for a common cold.xml)
+- Added *sessionCacheStorageType* as a new parameter for NAPPL
+- Adding *dbIpRange* to the cni security options
+
+## June 2024, release 1.2.1204
+
+- RMS now including HA Mode (see samples)
+- Fixes a problem, that the SNC Files are not in the NAPPL lib directory
+- Encrypt Sample
+- ZeroTrust Mode
+- Code cleanup
+
+## June 2024, release 1.2.1203
+
+- Allow Application Scripts to run before and after globally and per DocArea
+- Add more logging to DAV Container
+- Add PAM and SharePoint Connector to dsl
+
+## June 2024, release 1.2.1202
+
+- Allow multiple nscale SharePoint Connector instances with a separate configuration each
+- Allow Certificate Stores to be defined as configMaps OR secrets
+- current alpha Version of nscale SharePoint Connector for testing
+
+## June 2024, release 1.2.1201
+
+- Fixed a bug in nscale Web due to the read only file system
+- Added SNC support to access SAP Server
+- Added Java Certificate Keystores (cacerts and component.store)
+
+## June 2024, release 1.2.1200
+
+- Update to nscale Version 9.2.1200
+- Adding nscale PAM (Process Automation Modeler) helm chart
+- Adding nscale SharePoint Connector helm Chart
+- Adding O365 Sample (with SP Connector)
+- Support extra fonts (like Microsoft Core Fonts)
+- Allow calling global or local custom installation scripts during initialization (application chart)
+- Add Applications to Health Status
+- Adding a *Zero Trust* Example (`zerotrust.yaml`). The functionality is not yet completely implemented, so this is alpha status.
+- Temporarily adding Custom Project API container ("dms-api") to the instance
+- Alpha Version of Ports cleanup
+
+## May 2024, Release 1.2.11xx
+
+- Support envFrom in all components, with secretRef. Set the secret name in `envSecret`
+- Support whitelisting in ingresses
+- Add Inter Pod AntiAffinity
+- Now using kube-linter for pre-release checking
+- Supporting CNI NetworkPolicies
+
+## Apr 2024, Release 1.2.1004
+
+- Test with nscale 9.2
+- Operator Web GUI switch
+- Deny in all ingresses
+- Added Priority Classes
+- Added Budgets
+- Support for volumeName in PVC to supress dynamic provisioning of PVs
+- Support for kubePing **and** KUBERNETES Discovery for Cluster Communication
+- Documentation Updates
+- Updates to dsl (nstl and operator)
+- Bug Fixes
+
+## Mar 2024, Release 1.1.1501
+
+- Added the Operator
+- Web GUI for Monitoring
+- RBAC enhancements
+- Remote Management Server (RMS) Preview
+
+## Feb 2024, Release 1.1.1401
+
+- Added Administrator Client
+
+## Jan 2024, Release 1.1.1302
+
+- Changed Packaging to enable new helm Repo (gitea)
+- Update dsl (C4) config files
+- Added support for up to 4 Storage Layer
+
+## Jan 2024, Release 1.1.1301
+
+- Fixed Application Chart Security Settings
+- Added possibility to easily overwrite Versions
+    (see versions/*.yaml and e90 Example)
+- Added Charts for nscale Administrator (RAP) and WebDAV Connector
+- Added nstl Cluster (up to 4 Storage Layer)
+- Added support for Docker Desktop Kubernetes
+
+
+## Jan 2024, Release 1.1.1300
+
+- Added Security Features:
+    - root-less Container
+    - dropped capabilities (all)
+    - read only root file systems on all container
+    - Prohibit Privilege Escalation
+- New Toolbox Image
+    - new (controlled source) "wait" function
+    - new (controlled source) "webdav server" function
+- Change DB Image to bitnami beacuse of better support for security features.
+    - User 1001 instead of 999
+    - no chown necessary
+    - support for read-only root
+- Support multi-temp paths (because of read-only root)
+
+## 23 December Release
+
+- Security Features:
+    - Support for Illumio Labels and Gates
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..f8e8887
--- /dev/null
+++ b/README.md
@@ -0,0 +1,140 @@
+![logo_nplus](assets/logo_nplus.svg)
+
+The *nscale Plus Pack* (abbreviated as *nplus*) provides tools and instructions to deploy the [Ceyoniq](www.ceyoniq.com) *Enterprise Information Management* system [nscale](https://ceyoniq.com/produkte/) in a **multi-tenant** and **highly available** runtime environment in an **automated manner**. Additionally, the original **components are enhanced** to address common **enterprise requirements**.
+
+*nplus* is a **subscription**. The subscriber gains access to all *nplus* resources, ensuring an easy way to **protect their investment**.
+
+*nplus* does not include any nscale software, licenses or services, which are still to be obtained directly from Ceyoniq.
+
+
+## TL;DR
+
+Use `helm install` to install an nplus Instance. Setting the domain name is optional, but nplus will automatically generate an ingress including a certificate for you. 
+
+If you have *cert-manager* installed, it will issue a certificate for you. If not, nplus will generate a self-signed certificate.
+
+```bash
+helm install myinstance \
+    --set global.ingress.domain=myinstance.demo.nplus.cloud \
+    --set global.ingress.issuer=nplus-issuer \
+    nplus/nplus-instance
+```
+
+If you prefer to have *ArgoCD* perform the installation (instead of helm), you can use the *ArgoCD* chart to add the Argo Application:
+
+```bash
+helm install \
+  --set global.ingress.domain=myinstance-argo.demo.nplus.cloud \
+  --set global.ingress.issuer=nplus-issuer \
+  myinstance-argo nplus/nplus-instance-argo
+```
+
+
+
+You can check the status of the instance using:
+
+```bash
+# kubectl get instance
+NAME         HANDLER   VERSION    TENANT    STATUS
+myinstance   Helm      9.1.1501   default   starting
+```
+
+And the component status with:
+
+```bash
+# kubectl get components
+NAME                       INSTANCE     COMPONENT       VERSION    STATUS
+myinstance-nstl            myinstance   nstl            9.1.1200   healthy
+myinstance-rs              myinstance   rs              9.1.1300   healthy
+myinstance-database        myinstance   database        15         healthy
+myinstance-nappl           myinstance   nappl           9.1.1501   healthy
+myinstance-web             myinstance   web             9.1.1500   healthy
+myinstance-administrator   myinstance   administrator   9.1.1500   healthy
+```
+
+You can check the log files of the *Application Layer* for instance by typing:
+
+```bash
+# kubectl logs -l nplus/instance=myinstance,nplus/component=nappl
+```
+
+Uninstall myinstance using the following command:
+
+```bash
+helm uninstall myinstance
+```
+
+
+
+## Concept
+
+***nplus*** includes **helm charts** for individual components and umbrella charts orchestrating these components. It can be installed multiple times within a **Kubernetes cluster**, once **per namespace**. This allows the use of multiple separate *nplus* environments in a single Kubernetes cluster. For example, different **stages** (*DEV*, *QA*, *PROD*, etc.) or **tenants** (*A GmbH*, *B AG*, *C GbR*, ...) could be placed in different namespaces.
+
+With appropriate namespace separation, environments cannot see each other. However, it is optionally possible to create a separate namespace for **central services**, such as the *nscale Rendition Server* or the *nscale Storage Layer*, to be used across namespaces if desired.
+
+Within a Kubernetes namespace, the ***nplus environment*** manages any number of **instances**, **components** and **applications**:
+
+- An ***instance*** is a group of ***nscale**-*, ***nplus**-* and optionally ***open source**-* **components**, for example, an *nscale Application Layer* or a *KeyCloak* service. *nplus* includes separate, self-contained helm charts for each individual component, allowing a component to be deployed manually outside of an *instance*, although this is not recommended.
+
+- ***Applications*** are units that optionally bring *configurations* and *customizations* into the *instance*. This could include creating a document area or installing a customer record management via a ***Generic Base App***. Even ***smart apps*** can be packaged in applications. In the subscriber area, you find examples of *applications*, which are helm charts to transport your individual project specifics into an instance.
+
+  If you have custom components, such as an API component for business applications, you can also package them into an application to install them with the suite.
+
+For **GitOps projects**, all charts are also available as **ArgoCD** variants.
+
+A **central storage** for the **configuration data** of individual *components* is provided for each *nplus environment*. This central storage is versioned using **git**. All config files from all applications of an installation are stored here.
+
+
+
+## Features
+
+For operation in a Kubernetes cluster, *nplus* provides:
+
+- Versioned *helm charts* for all *nscale* components for installation, updating, and uninstallation.
+- The nscale components (Application Layer, Storage Layer, Web, CMIS, etc.) can be grouped into *instances* in any combination.
+- Multiple *instances* can run in a Kubernetes namespace (e.g., *Tenant1*, *Tenant2*, and *CentralServices*).
+- A namespace can represent either a tenant (e.g., *Sales*) or a stage (e.g., *prod*, *qa*, or *dev) if running multiple stages on one cluster.
+- Umbrella charts for complex environments, including:
+  - Optional LDAP directory with openLDAP.
+  - Optional central Single Sign-On with Multi-Factor Authentication using KeyCloak.
+  - Optional PostgreSQL database.
+  - Optional S3 connection for the Storage Layer.
+  - Optional Azure Blob connection for the Storage Layer.
+
+- All charts are also available in an *argoCD* variant to integrate them into a GitOps deployment pipeline.
+- Support for AppDynamics.
+- Support for security tools, especially Illumio, Cilium, or Calico.
+- Support for snc (for accessing SAP systems).
+- Support for cert-manager for automatic TLS certificate generation.
+- A separate application chart (*nplus Application*) for deploying and updating solutions.
+- Usability of the classic *nscale Administrator* in a K8s DEV environment, eliminating the need for developers and administrators to adapt.
+- Umbrella charts with tenant templates that can include and consolidate applications, solutions, and other external tools. Installing, uninstalling, or updating such tenants based on a template can then be done in a single line.
+- Use of dedicated Application Layers for jobs, SAP, and users. For each use case, any number of replicas can be specified.
+- Use of dedicated nscale Web instances for different departments, such as Department A and Department B. This allows loading different snippets or applying different SSO rules for each department.
+
+
+
+### Licensing
+
+The subscription credentials for *nplus* include access to the *nplus* (container) registry, the *nplus* (helm) repository, the *nplus* online documentation, and the *nplus* license from 42i GmbH.
+
+*nscale* must be obtained and licensed through the manufacturer (*Ceyoniq Technology GmbH*) as usual and is linked by *nplus*. You need access to the *nscale Container Registry* and a suitable *license.xml* for the instance.
+
+
+
+### Versioning
+
+The chart version of the *nplus* and *nplus-argocd* charts corresponds to the *nscale Application Layer* version. They include references to the components approved for this *nscale* version. This ensures that you always get the official versions from Ceyoniq in the official combination. This behavior can be individually adjusted, for example, if a web client needs to be tested with the latest version of the previous month's NAPPL.
+
+The (helm) app version corresponds to the helm git tag.
+
+The chart version of the components (*nappl*, *web*, ...) corresponds to the respective image version to pin them exactly. All charts can be used individually but require a suitable runtime environment (*nplus*) to run. They do not work outside of *nplus*. Within an *nplus* environment, additional individual components can be easily started.
+
+
+
+# Subscriber Area
+
+- The changelog is kept in the [HISTORY.md](/subscription/helm/src/branch/master/HISTORY.md).
+- More information, all source code, and samples can be found at the [official nplus repo](/subscription/helm).
+
+
diff --git a/VERSIONING.md b/VERSIONING.md
new file mode 100644
index 0000000..cb2dffc
--- /dev/null
+++ b/VERSIONING.md
@@ -0,0 +1,47 @@
+
+# Versioning
+
+The *nplus chart versioning* is tied to the *nscale Application Layer* version, as we want to use `helm upgrade --version 9.2.1200` to upgrade to nappl 9.2.1200 for instance. As the Application Layer upgrades the database scheme in minor releases, this is the crutial version number.
+
+As the component charts also need to be deployable solo, so e.g. deploy a *nplus-component-web* chart into an existing instance, also the components use the version of the corresponding nscale component version. 
+
+So we end up having an *instance chart* version that is equal to the *nplus-component-nappl* chart version and a bunch of other components that might have different versions in that bundle, all tied to the component version.
+
+The *nplus code versioning*, meaning the version of the chart code, is written to the `appVersion` field in the `Chart.yaml`, so with a `helm list`, you will get both versions.
+
+The code is versioned with tags. If different code is necessary for specific versions of nscale, this is handled by the chart. So the latest chart code should be able to handle the latest nscale version and all versions below (since 8.0, the first container release). You can always take the code tagged with version and appVersion in the Chart.yaml and mix in completely different nscale versions to deploy a specific release with the current code version. Please see the samples how to do that.
+
+## Version Scheduling
+
+nscale releases monthly versions latest on the first weekday of the month. At the end of the first week, nplus releases the corresponding chart version. Since it is tied to the nscale versioning, also minor and major releases are using the nscale schedule: April and October for minors and April of every odd year for majors.
+
+## Version Naming
+
+The versioning uses *semver 2* (see [semver.org](https://semver.org)).
+
+Beta Versions get tagged with `-<build>`. In SemVer 2 syntax, these are pre-releases to the next version. In order to get the sorting correctly (so helm correctly fetches the *latest* version), pre-releases must use the version of the next release. Since these Versions are named by Ceyoniq for the nscale software, we do not know the next version for sure (but their naming theme is pretty straight and strict).
+
+However, what nplus does for this case is to increase the patch and use that on as the minimal next version. So after the release of version `9.2.1201` (nappl, thus als nplus), we will get the next development version `9.2.1202-1`. Until the next nscale release, probably being something like `9.2.130x`, when the pre-release then gets released and takes this version.
+
+## helm
+
+If you just use `helm install`, you will always get the latest released version available. Be carefull, as you might end up with an Application Layer version you might not want. So it is better to pin the version you want by something like `helm install --version 9.2.1200`.
+
+If you want to test with the latest development beta release, you can install `helm install --devel`, which gives you the latest beta.
+
+You can query available versions with `helm search repo nplus --versions --devel`
+
+So...
+
+- `helm search repo nplus` lists the latest released version of every component available
+- `helm search repo nplus --devel` lists the latest available version of every component available, including beta versions
+- `helm search repo nplus --versions --devel` lists all available versions of every component
+
+## Best Practise
+
+- use version pinning
+- use the right channel (--devel for dev, released for QA and PROD)
+
+## Using the chart source code
+
+The code in the git repository is updated automatically with the build version in development. So the `Chart.yaml` files get a new version with every push. The appVersion refers to the source code in the original (private) repo, so that - in case of a support call - the exact used code can be determined.
diff --git a/ai/README.md b/ai/README.md
new file mode 100644
index 0000000..616c812
--- /dev/null
+++ b/ai/README.md
@@ -0,0 +1,3 @@
+# Ingest Formats
+
+This directory contains the *nplus* documentation in formats, easily digestible for AI LLMs.
diff --git a/ai/jsonl/README.md b/ai/jsonl/README.md
new file mode 100644
index 0000000..d305726
--- /dev/null
+++ b/ai/jsonl/README.md
@@ -0,0 +1,4 @@
+# Documentation in jsonl format
+
+This directory contains the *nplus* documentation in an jsonl format to be injested into LLMs. This idea is to be able to create a support assistent, who can help with 
+the *nplus* chart configuration.
diff --git a/ai/jsonl/chart_administrator.jsonl b/ai/jsonl/chart_administrator.jsonl
new file mode 100644
index 0000000..451fd46
--- /dev/null
+++ b/ai/jsonl/chart_administrator.jsonl
@@ -0,0 +1,137 @@
+{ "chart_name": "nplus-component-administrator", "chart_version": "1.2.1500-169", "chart_description": "nscale Administrator, providing the Web Version of the Administrator to be used in the Instance" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "javaOpts", "description": "Options for the Java VM", "default": "" }
+{ "key": "javaOpts.javaMaxMem", "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed", "default": "" }
+{ "key": "javaOpts.javaMaxRamPercentage", "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.", "default": "" }
+{ "key": "javaOpts.javaMinMem", "description": "set the minimum memory, java will consume", "default": "" }
+{ "key": "javaOpts.javaMisc", "description": "Any misc Java Options that need to be passed to the container", "default": "" }
+{ "key": "meta", "description": "defines internal constants for nplus. do not change these values", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nappl", "description": "The nscale Application Layer, this component should talk to", "default": "" }
+{ "key": "nappl.account", "description": "The technical account to login with", "default": "" }
+{ "key": "nappl.domain", "description": "The domain of the technical account", "default": "" }
+{ "key": "nappl.host", "description": "nappl host name", "default": "" }
+{ "key": "nappl.instance", "description": "instance of the Application Layer, likely `instance1`", "default": "" }
+{ "key": "nappl.password", "description": "The password of the technical accunt (if not set by secret)", "default": "" }
+{ "key": "nappl.port", "description": "nappl port (http 8080 or https 8443)", "default": "" }
+{ "key": "nappl.secret", "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)", "default": "" }
+{ "key": "nappl.ssl", "description": "sets the Advanced Connect to tls", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/chart_application.jsonl b/ai/jsonl/chart_application.jsonl
new file mode 100644
index 0000000..1aafde9
--- /dev/null
+++ b/ai/jsonl/chart_application.jsonl
@@ -0,0 +1,116 @@
+{ "chart_name": "nplus-application", "chart_version": "1.2.1500-169", "chart_description": "nplus Application, used to install Apps and Customizations into the nscale Application Layer." }
+{ "key": "docAreas", "description": "Provide a list of docareas to create. Please also see the example files", "default": "" }
+{ "key": "download", "description": "A list of URLs (Links) to Assets to download before anything else if the download is a .tar.gz, it is automatically untared to /pool/downloads", "default": "" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nappl", "description": "The nscale Application Layer, this component should talk to", "default": "" }
+{ "key": "nappl.account", "description": "The technical account to login with", "default": "" }
+{ "key": "nappl.domain", "description": "The domain of the technical account", "default": "" }
+{ "key": "nappl.host", "description": "nappl host name", "default": "" }
+{ "key": "nappl.instance", "description": "instance of the Application Layer, likely `instance1`", "default": "" }
+{ "key": "nappl.password", "description": "The password of the technical accunt (if not set by secret)", "default": "" }
+{ "key": "nappl.port", "description": "nappl port (http 8080 or https 8443)", "default": "" }
+{ "key": "nappl.secret", "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)", "default": "" }
+{ "key": "nappl.ssl", "description": "sets the Advanced Connect to tls", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "nstl.host", "description": "The dns of the *nscale Server Storage Layer*. This is used to add it to the nappl configuration", "default": "" }
+{ "key": "prerun", "description": "A list of scripts to run before the deployment of Apps", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "rs.host", "description": "The dns of the *nscale rendition Server*. This is used to add it to the nappl configuration", "default": "" }
+{ "key": "run", "description": "A list of scripts to run after the deployment of Apps", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/chart_cmis.jsonl b/ai/jsonl/chart_cmis.jsonl
new file mode 100644
index 0000000..307b2cc
--- /dev/null
+++ b/ai/jsonl/chart_cmis.jsonl
@@ -0,0 +1,140 @@
+{ "chart_name": "nplus-component-cmis", "chart_version": "1.2.1500-169", "chart_description": "nscale CMIS Connector, provides a CMIS Interface to the Instance" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "javaOpts", "description": "Options for the Java VM", "default": "" }
+{ "key": "javaOpts.javaMaxMem", "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed", "default": "" }
+{ "key": "javaOpts.javaMaxRamPercentage", "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.", "default": "" }
+{ "key": "javaOpts.javaMinMem", "description": "set the minimum memory, java will consume", "default": "" }
+{ "key": "javaOpts.javaMisc", "description": "Any misc Java Options that need to be passed to the container", "default": "" }
+{ "key": "meta", "description": "defines internal constants for nplus. do not change these values", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCount", "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nappl", "description": "The nscale Application Layer, this component should talk to", "default": "" }
+{ "key": "nappl.account", "description": "The technical account to login with", "default": "" }
+{ "key": "nappl.domain", "description": "The domain of the technical account", "default": "" }
+{ "key": "nappl.host", "description": "nappl host name", "default": "" }
+{ "key": "nappl.instance", "description": "instance of the Application Layer, likely `instance1`", "default": "" }
+{ "key": "nappl.password", "description": "The password of the technical accunt (if not set by secret)", "default": "" }
+{ "key": "nappl.port", "description": "nappl port (http 8080 or https 8443)", "default": "" }
+{ "key": "nappl.secret", "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)", "default": "" }
+{ "key": "nappl.ssl", "description": "sets the Advanced Connect to tls", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "replicaCount", "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "updateStrategy", "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/chart_database.jsonl b/ai/jsonl/chart_database.jsonl
new file mode 100644
index 0000000..7eb4449
--- /dev/null
+++ b/ai/jsonl/chart_database.jsonl
@@ -0,0 +1,117 @@
+{ "chart_name": "nplus-component-database", "chart_version": "1.2.1500-169", "chart_description": "Postgres Database, deploys a DEV or TESTING environment DB" }
+{ "key": "database.account", "description": "the technical account to own the nscale database, if not set by secret", "default": "" }
+{ "key": "database.name", "description": "name of the nscale database", "default": "" }
+{ "key": "database.password", "description": "password of the technical account, if not set by secret", "default": "" }
+{ "key": "database.secret", "description": "the secret with credentials (account, password) for the nscale technical account. This setting has priority over account and password", "default": "" }
+{ "key": "dbAdmin.account", "description": "the database admin account, if not set by secret", "default": "" }
+{ "key": "dbAdmin.password", "description": "the database admin password, if not set by secret", "default": "" }
+{ "key": "dbAdmin.secret", "description": "the secret with credentials (account, password) for the database admin account. This setting has priority over adminAccount and adminPassword", "default": "" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "priority", "description": "You can give a component a specific priorityClass to implement a quality of service. You can leave this empty, then no priority is set. If you set a class, this class is taken If you additionally enable create, the class is created for you with the value defined.", "default": "" }
+{ "key": "priority.className", "description": "Set the priority class for the Application Layer deployment if desired", "default": "" }
+{ "key": "priority.createClass", "description": "Creates an individual PriorityClass for this instance", "default": "" }
+{ "key": "priority.value", "description": "Sets the priorityValue", "default": "1000000" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+
diff --git a/ai/jsonl/chart_dmsapi.jsonl b/ai/jsonl/chart_dmsapi.jsonl
new file mode 100644
index 0000000..38871c9
--- /dev/null
+++ b/ai/jsonl/chart_dmsapi.jsonl
@@ -0,0 +1,139 @@
+{ "chart_name": "eon-dms-api", "chart_version": "1.2.1500-169", "chart_description": "eon DMS-API provides a eon Standard Interface to the Instance" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "javaOpts", "description": "Options for the Java VM", "default": "" }
+{ "key": "javaOpts.javaMaxMem", "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed", "default": "" }
+{ "key": "javaOpts.javaMaxRamPercentage", "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.", "default": "" }
+{ "key": "javaOpts.javaMinMem", "description": "set the minimum memory, java will consume", "default": "" }
+{ "key": "javaOpts.javaMisc", "description": "Any misc Java Options that need to be passed to the container", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCount", "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nappl", "description": "The nscale Application Layer, this component should talk to", "default": "" }
+{ "key": "nappl.account", "description": "The technical account to login with", "default": "" }
+{ "key": "nappl.domain", "description": "The domain of the technical account", "default": "" }
+{ "key": "nappl.host", "description": "nappl host name", "default": "" }
+{ "key": "nappl.instance", "description": "instance of the Application Layer, likely `instance1`", "default": "" }
+{ "key": "nappl.password", "description": "The password of the technical accunt (if not set by secret)", "default": "" }
+{ "key": "nappl.port", "description": "nappl port (http 8080 or https 8443)", "default": "" }
+{ "key": "nappl.secret", "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)", "default": "" }
+{ "key": "nappl.ssl", "description": "sets the Advanced Connect to tls", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "replicaCount", "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "updateStrategy", "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/chart_envbackend.jsonl b/ai/jsonl/chart_envbackend.jsonl
new file mode 100644
index 0000000..5fe7589
--- /dev/null
+++ b/ai/jsonl/chart_envbackend.jsonl
@@ -0,0 +1,41 @@
+{ "chart_name": "nplus-environment-backend", "chart_version": "1.2.1500-169", "chart_description": "Installs Namespace-Wide Resources such as the conf PVC and the ptemp PVC" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "storage.conf.name", "description": "this is the name of the common config storage. please see section \"Storage\" for more information", "default": "" }
+{ "key": "storage.conf.size", "description": "this is the size of the common config storage. please see section \"Storage\" for more information", "default": "" }
+{ "key": "storage.conf.volumeName", "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner", "default": "" }
+{ "key": "storage.ptemp.name", "description": "this is the name of the common persistant temp storage. please see section \"Storage\" for more information", "default": "" }
+{ "key": "storage.ptemp.size", "description": "this is the size of the common ptemp storage. please see section \"Storage\" for more information", "default": "" }
+{ "key": "storage.ptemp.volumeName", "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+
diff --git a/ai/jsonl/chart_envdav.jsonl b/ai/jsonl/chart_envdav.jsonl
new file mode 100644
index 0000000..7991c04
--- /dev/null
+++ b/ai/jsonl/chart_envdav.jsonl
@@ -0,0 +1,79 @@
+{ "chart_name": "nplus-environment-dav", "chart_version": "1.2.1500-169", "chart_description": "Provides WebDAV access to environment resources such as the conf PVC and the ptemp PVC" }
+{ "key": "account", "description": "the dav user", "default": "" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "password", "description": "password of the dav user", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "secret", "description": "Alternatively, define a secret", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+
diff --git a/ai/jsonl/chart_environment.jsonl b/ai/jsonl/chart_environment.jsonl
new file mode 100644
index 0000000..4ff9c3a
--- /dev/null
+++ b/ai/jsonl/chart_environment.jsonl
@@ -0,0 +1,13 @@
+{ "chart_name": "nplus-environment", "chart_version": "1.2.1500-169", "chart_description": "Installs Namespace-Wide Resources such as the conf PVC, the toolbox and the nplus monitoring service" }
+{ "key": "components.dav", "description": "Enables WebDAV access to conf and ptemp", "default": "" }
+{ "key": "components.prepper", "description": "enables an optional prepper that you can use to deploy fonts, scripts etc. during environment setup", "default": "" }
+{ "key": "components.toolbox", "description": "enables the toolbox", "default": "" }
+{ "key": "environmentNameOverride", "description": "If you want to override the name of the Environment for display purposes, do it here.", "default": "" }
+{ "key": "global.environment.storage.conf.name", "description": "this is the name of the common config storage. please see section \"Storage\" for more information", "default": "" }
+{ "key": "global.environment.storage.conf.size", "description": "this is the size of the common config storage. please see section \"Storage\" for more information", "default": "" }
+{ "key": "global.environment.storage.conf.volumeName", "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner", "default": "" }
+{ "key": "global.environment.storage.ptemp.name", "description": "this is the name of the common persistant temp storage. please see section \"Storage\" for more information", "default": "" }
+{ "key": "global.environment.storage.ptemp.size", "description": "this is the size of the common ptemp storage. please see section \"Storage\" for more information", "default": "" }
+{ "key": "global.environment.storage.ptemp.volumeName", "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner", "default": "" }
+{ "key": "global.meta.isEnvironment", "description": "specifies that this is deployment is part of an Environment. Used to determine the correct  name of the deployment @internal -- Do not change", "default": "" }
+
diff --git a/ai/jsonl/chart_envoperator.jsonl b/ai/jsonl/chart_envoperator.jsonl
new file mode 100644
index 0000000..3eba376
--- /dev/null
+++ b/ai/jsonl/chart_envoperator.jsonl
@@ -0,0 +1,74 @@
+{ "chart_name": "nplus-environment-operator", "chart_version": "1.2.1500-169", "chart_description": "Installs the nplus operator managin the custom resource definitions for nplus and nscale" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "ui", "description": "Enables the web ui, default under /monitoring", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+
diff --git a/ai/jsonl/chart_envtoolbox.jsonl b/ai/jsonl/chart_envtoolbox.jsonl
new file mode 100644
index 0000000..a919eae
--- /dev/null
+++ b/ai/jsonl/chart_envtoolbox.jsonl
@@ -0,0 +1,58 @@
+{ "chart_name": "nplus-environment-toolbox", "chart_version": "1.2.1500-169", "chart_description": "Installs the environment toolbox with git and nstore downloader installed, also serving as target for pool copy actions in the pipeline" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "nstoreDownloader.enabled", "description": "enables the nstore downloader", "default": "" }
+{ "key": "nstoreDownloader.nstore", "description": "set the nstore URL", "default": "`https://nstore.ceyoniq.com...`" }
+{ "key": "nstoreDownloader.target", "description": "target directory in the conf pv", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+
diff --git a/ai/jsonl/chart_erpcmis.jsonl b/ai/jsonl/chart_erpcmis.jsonl
new file mode 100644
index 0000000..5835973
--- /dev/null
+++ b/ai/jsonl/chart_erpcmis.jsonl
@@ -0,0 +1,157 @@
+{ "chart_name": "nplus-component-erpcmis", "chart_version": "1.2.1500-169", "chart_description": "nscale ERP CMIS, providing SAP S/4 HANA Public Cloud Archive Access" }
+{ "key": "alien.doAppend", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "alien.port", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "alien.server", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "alien.ssl", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "alien.url", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "alien.useSign", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "javaOpts", "description": "Options for the Java VM", "default": "" }
+{ "key": "javaOpts.javaMaxMem", "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed", "default": "" }
+{ "key": "javaOpts.javaMaxRamPercentage", "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.", "default": "" }
+{ "key": "javaOpts.javaMinMem", "description": "set the minimum memory, java will consume", "default": "" }
+{ "key": "javaOpts.javaMisc", "description": "Any misc Java Options that need to be passed to the container", "default": "" }
+{ "key": "meta", "description": "defines internal constants for nplus. do not change these values", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "migration.checkDocuments", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "migration.checkIgnoreTime", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "migration.delay", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "migration.doListMigration", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "migration.enabled", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "migration.fileDelimiter", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "migration.viaFileSystem", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "minReplicaCount", "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nappl", "description": "The nscale Application Layer, this component should talk to", "default": "" }
+{ "key": "nappl.account", "description": "The technical account to login with", "default": "" }
+{ "key": "nappl.domain", "description": "The domain of the technical account", "default": "" }
+{ "key": "nappl.host", "description": "nappl host name", "default": "" }
+{ "key": "nappl.instance", "description": "instance of the Application Layer, likely `instance1`", "default": "" }
+{ "key": "nappl.password", "description": "The password of the technical accunt (if not set by secret)", "default": "" }
+{ "key": "nappl.port", "description": "nappl port (http 8080 or https 8443)", "default": "" }
+{ "key": "nappl.secret", "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)", "default": "" }
+{ "key": "nappl.ssl", "description": "sets the Advanced Connect to tls", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "replicaCount", "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "sign.authID", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "sign.keyAlias", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "sign.keyPassword", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "updateStrategy", "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+{ "key": "xsap.useSign", "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*", "default": "" }
+
diff --git a/ai/jsonl/chart_erpproxy.jsonl b/ai/jsonl/chart_erpproxy.jsonl
new file mode 100644
index 0000000..2ee49fa
--- /dev/null
+++ b/ai/jsonl/chart_erpproxy.jsonl
@@ -0,0 +1,158 @@
+{ "chart_name": "nplus-component-erpproxy", "chart_version": "1.2.1500-169", "chart_description": "nscale ERP Proxy, providing SAP Archive Link access to alien Archive Components" }
+{ "key": "alien.doAppend", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "alien.port", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "alien.server", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "alien.ssl", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "alien.url", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "alien.useSign", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "javaOpts", "description": "Options for the Java VM", "default": "" }
+{ "key": "javaOpts.javaMaxMem", "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed", "default": "" }
+{ "key": "javaOpts.javaMaxRamPercentage", "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.", "default": "" }
+{ "key": "javaOpts.javaMinMem", "description": "set the minimum memory, java will consume", "default": "" }
+{ "key": "javaOpts.javaMisc", "description": "Any misc Java Options that need to be passed to the container", "default": "" }
+{ "key": "meta", "description": "defines internal constants for nplus. do not change these values", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "migration.checkDocuments", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "migration.checkIgnoreTime", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "migration.delay", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "migration.doListMigration", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "migration.enabled", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "migration.fileDelimiter", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "migration.viaFileSystem", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "minReplicaCount", "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nappl", "description": "The nscale Application Layer, this component should talk to", "default": "" }
+{ "key": "nappl.account", "description": "The technical account to login with", "default": "" }
+{ "key": "nappl.domain", "description": "The domain of the technical account", "default": "" }
+{ "key": "nappl.host", "description": "nappl host name", "default": "" }
+{ "key": "nappl.instance", "description": "instance of the Application Layer, likely `instance1`", "default": "" }
+{ "key": "nappl.password", "description": "The password of the technical accunt (if not set by secret)", "default": "" }
+{ "key": "nappl.port", "description": "nappl port (http 8080 or https 8443)", "default": "" }
+{ "key": "nappl.secret", "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)", "default": "" }
+{ "key": "nappl.ssl", "description": "sets the Advanced Connect to tls", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "replicaCount", "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "sign.authID", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "sign.keyAlias", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "sign.keyPassword", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "updateStrategy", "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+{ "key": "xsap.url", "description": "xsap url to use.", "default": "" }
+{ "key": "xsap.useSign", "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*", "default": "" }
+
diff --git a/ai/jsonl/chart_ilm.jsonl b/ai/jsonl/chart_ilm.jsonl
new file mode 100644
index 0000000..12c6522
--- /dev/null
+++ b/ai/jsonl/chart_ilm.jsonl
@@ -0,0 +1,140 @@
+{ "chart_name": "nplus-component-ilm", "chart_version": "1.2.1500-169", "chart_description": "nscale ILM Connector, providing a certified SAP ILM interface" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "javaOpts", "description": "Options for the Java VM", "default": "" }
+{ "key": "javaOpts.javaMaxMem", "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed", "default": "" }
+{ "key": "javaOpts.javaMaxRamPercentage", "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.", "default": "" }
+{ "key": "javaOpts.javaMinMem", "description": "set the minimum memory, java will consume", "default": "" }
+{ "key": "javaOpts.javaMisc", "description": "Any misc Java Options that need to be passed to the container", "default": "" }
+{ "key": "meta", "description": "defines internal constants for nplus. do not change these values", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCount", "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nappl", "description": "The nscale Application Layer, this component should talk to", "default": "" }
+{ "key": "nappl.account", "description": "The technical account to login with", "default": "" }
+{ "key": "nappl.domain", "description": "The domain of the technical account", "default": "" }
+{ "key": "nappl.host", "description": "nappl host name", "default": "" }
+{ "key": "nappl.instance", "description": "instance of the Application Layer, likely `instance1`", "default": "" }
+{ "key": "nappl.password", "description": "The password of the technical accunt (if not set by secret)", "default": "" }
+{ "key": "nappl.port", "description": "nappl port (http 8080 or https 8443)", "default": "" }
+{ "key": "nappl.secret", "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)", "default": "" }
+{ "key": "nappl.ssl", "description": "sets the Advanced Connect to tls", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "replicaCount", "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "updateStrategy", "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/chart_instance-argo.jsonl b/ai/jsonl/chart_instance-argo.jsonl
new file mode 100644
index 0000000..856feb9
--- /dev/null
+++ b/ai/jsonl/chart_instance-argo.jsonl
@@ -0,0 +1,11 @@
+{ "chart_name": "nplus-instance-argo", "chart_version": "1.2.1500-169", "chart_description": "nplus Instance ArgoCD Edition, supporting the deployment of npus Instances through ArgoCD" }
+{ "key": "argocd.chart", "description": "The name of the chart to use for the instance", "default": "" }
+{ "key": "argocd.destinationNamespace", "description": "ArgoCD can deploy to any Namespace on the destination Server. You have to specify it. Default is the release namespace", "default": "" }
+{ "key": "argocd.destinationServer", "description": "ArgoCD can also remote deploy Applications to alien clusters. The server specifies the API Endpoint of the Cluster, where the Application should be deployed", "default": "" }
+{ "key": "argocd.namespace", "description": "The ArgoCD Namespace within the cluster. The ArgoCD Application will be deployed to this namespace You will need write privileges for this namespace", "default": "" }
+{ "key": "argocd.project", "description": "ArgoCD organizes Applications in Projects. This is the name of the project, the application should be deployed to", "default": "" }
+{ "key": "argocd.prune", "description": "Toggle pruning for this Application", "default": "" }
+{ "key": "argocd.repo", "description": "Specifiy the helm repo, from which ArgoCD should load the chart. Please make sure ArgoCD gets access rights to this repo", "default": "" }
+{ "key": "argocd.selfHeal", "description": "Toggle self healing feature for this Application", "default": "" }
+{ "key": "global.meta.isArgo", "description": "specifies that this is an Argo Installation. Used to determine the correct handler in the chart @internal -- Do not change", "default": "" }
+
diff --git a/ai/jsonl/chart_instance.jsonl b/ai/jsonl/chart_instance.jsonl
new file mode 100644
index 0000000..3c265e4
--- /dev/null
+++ b/ai/jsonl/chart_instance.jsonl
@@ -0,0 +1,262 @@
+{ "chart_name": "nplus-instance", "chart_version": "1.2.1500-169", "chart_description": "nplus Instance, an umbrella chart for orchestrating the components in a nplus Instance" }
+{ "key": "administrator.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "administrator.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "administrator.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "administrator.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "administrator.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "administrator.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "application.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "application.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "application.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "application.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "application.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "application.nstl.host", "description": "sets the dns of the *nscale Server Storage Layer*, that should be configured", "default": "" }
+{ "key": "application.rs.host", "description": "sets the dns of the *nscale Rendition Server*, that should be configured", "default": "" }
+{ "key": "application.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "backend.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "cmis.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "cmis.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "cmis.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "cmis.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "cmis.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "cmis.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "components.administrator", "description": "enable a *nscale Administrator Web* component in this instance", "default": "" }
+{ "key": "components.application", "description": "deploy any solution using GBA, Standard Apps or shell copy with this generic deployment chart", "default": "" }
+{ "key": "components.cmis", "description": "enable a *nscale CMIS Connector* component in this instance", "default": "" }
+{ "key": "components.database", "description": "enable an internal *Postgres Database* in this instance", "default": "" }
+{ "key": "components.erpcmis", "description": "enable a *nscale ERP CMIS Connector* component in this instance", "default": "" }
+{ "key": "components.erpproxy", "description": "enable a *nscale ERP Proxy Connector* component in this instance", "default": "" }
+{ "key": "components.ilm", "description": "enable a *nscale ILM Connector* component in this instance", "default": "" }
+{ "key": "components.mon", "description": "enable a *nscale Monitoring Console* component in this instance", "default": "" }
+{ "key": "components.nappl", "description": "enable a consumer *nscale Application Layer* component in this instance", "default": "" }
+{ "key": "components.nappljobs", "description": "enable a dedicated jobs *nscale Application Layer* component in this instance please also make sure to set the *jobs* setting", "default": "" }
+{ "key": "components.nstl", "description": "enable a *nscale Server Storage Layer* component in this instance If you are in a **High Availability** scenario, disable this", "default": "" }
+{ "key": "components.nstla", "description": "enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario.", "default": "" }
+{ "key": "components.nstlb", "description": "enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario.", "default": "" }
+{ "key": "components.nstlc", "description": "enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario.", "default": "" }
+{ "key": "components.nstld", "description": "enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario.", "default": "" }
+{ "key": "components.pam", "description": "enable a *nscale Process Automation Modeler* component in this instance", "default": "" }
+{ "key": "components.pipeliner", "description": "enable *nscale Pipeliner* component in this instance", "default": "" }
+{ "key": "components.prepper", "description": "download, deploy and run any git asset or script prior to installation of the components", "default": "" }
+{ "key": "components.rms", "description": "enable a *nplus Remote Management Server* component in this instance If you are in a **High Availability** scenario, disable this", "default": "" }
+{ "key": "components.rmsa", "description": "enable an additional *nplus Remote Management Server* in this instance within a **High Availability** scenario.", "default": "" }
+{ "key": "components.rmsb", "description": "enable an additional *nplus Remote Management Server* in this instance within a **High Availability** scenario.", "default": "" }
+{ "key": "components.rs", "description": "enable a *nscale Rendition Server* component in this instance", "default": "" }
+{ "key": "components.sharepoint", "description": "enable a *nscale Sharepoint Connector* component in this instance", "default": "" }
+{ "key": "components.sharepointa", "description": "enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters", "default": "" }
+{ "key": "components.sharepointb", "description": "enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters", "default": "" }
+{ "key": "components.sharepointc", "description": "enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters", "default": "" }
+{ "key": "components.sharepointd", "description": "enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters", "default": "" }
+{ "key": "components.sim", "description": "This section is for the single-instance-mode in which all environement components are integrated into the instance", "default": "" }
+{ "key": "components.sim.backend", "description": "This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. the backend components holds the common storages / PVCs for conf and ptemp umong other common environmental resources", "default": "" }
+{ "key": "components.sim.dav", "description": "This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. DAV gives you WebDAV access to your conf and ptemp volumes", "default": "" }
+{ "key": "components.sim.operator", "description": "This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. The Operator will let you query the Custom Resources for nscale, e.g. `kubectl get nscale`", "default": "" }
+{ "key": "components.sim.toolbox", "description": "This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. the toolbox has a git client installed and is suitable for pulling, pushing, copying  stuff into the pool, fonts, certificates, snippets and configuration files", "default": "" }
+{ "key": "components.web", "description": "enable a *nscale Web* component in this instance", "default": "" }
+{ "key": "components.webdav", "description": "enable a *nscale WebDAV Connector* component in this instance", "default": "" }
+{ "key": "database", "description": "For the Database, we use a postgres 16 Ceyoniq uses docker.io/bitnami/postgresql:16", "default": "" }
+{ "key": "database.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "database.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "database.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "database.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "database.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "dmsapi.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "dmsapi.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "erpcmis.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "erpcmis.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "erpcmis.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "erpcmis.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "erpcmis.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "erpcmis.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "erpproxy.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "erpproxy.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "erpproxy.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "erpproxy.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "erpproxy.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "erpproxy.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "global.database.account", "description": "DB account (if not using a secret)", "default": "" }
+{ "key": "global.database.dialect", "description": "nscale DB server dialect", "default": "" }
+{ "key": "global.database.driverclass", "description": "nscale DB server driverclass", "default": "" }
+{ "key": "global.database.name", "description": "name of the nscale DB", "default": "" }
+{ "key": "global.database.password", "description": "DB password (if not using a secret)", "default": "" }
+{ "key": "global.database.passwordEncoded", "description": "weather the password is stored encrypted", "default": "" }
+{ "key": "global.database.schema", "description": "DB schema name", "default": "" }
+{ "key": "global.database.secret", "description": "DB credential secret (account, password)", "default": "" }
+{ "key": "global.database.url", "description": "The URL to the database", "default": "" }
+{ "key": "global.ingress.appRoot", "description": "Sets the root for this instance, where incoming root traffic should be redirected to", "default": "" }
+{ "key": "global.ingress.class", "description": "sets the global ingressclass for all components to use - if they do not define a specific one, for example if there are separate controllers for internal and external traffic", "default": "`public``" }
+{ "key": "global.ingress.createSelfSignedCertificate", "description": "if you do not define an issuer to generate the tls secret for you, you still can have a self signed certificate generated for you, if you set this to true. The default is true, so either you have an issuer or not, you will always end up with a certificate. Set an empty issuer and createSelfSignedCertificate to false to have no certificate generated and use an external or existing secret. Then make sure the secret matches.", "default": "" }
+{ "key": "global.ingress.domain", "description": "Sets the global domain within the instance to be used, if the component does not define any domain. If this remains empty, no ingress is generated Example: `{{ .instance.group }}.lab.nplus.cloud`", "default": "" }
+{ "key": "global.ingress.issuer", "description": "Sets the name of the issuer to create the tls secret. Very common is to have it created by  cert-manager. Please see the documentation how to create a cert-manager cluster issuer for example. If no issuer is set, no certificate request will be generated", "default": "" }
+{ "key": "global.ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "`ingress, kube-system, ingress-nginx`" }
+{ "key": "global.ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. This secret is then either generated by cert-manager or self signed by helm - or not created", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "global.ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "global.instance.group", "description": "The group of the instance. This is used for the networkPolicies. Only Pods within one group are allowed to communicate if you enable the nplus Network Policies. By default, this is set the same as the instance name", "default": "" }
+{ "key": "global.instance.name", "description": "The name of the instance. Should this name be identical to the namespace name, then  the prefix will be dropped. By default, this is the .Release.Name", "default": "" }
+{ "key": "global.license", "description": "Globally set the license secret name", "default": "" }
+{ "key": "global.logForwarderImage.name", "description": "defines the nplus toolbox name to be used for the *wait* feature", "default": "" }
+{ "key": "global.logForwarderImage.pullPolicy", "description": "defines the nplus toolbox pull policy to be used for the *wait* feature", "default": "" }
+{ "key": "global.logForwarderImage.repo", "description": "defines the nplus toolbox image to be used for the *wait* feature", "default": "" }
+{ "key": "global.logForwarderImage.tag", "description": "defines the tag for the logforwarder (FluentBit) @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "global.meta.nscaleVersion", "description": "Sets the nscale version of this deployment / instance. This is used by the operator to display the correct version e.g. in the Web UI. @internal -- this is set by the devOps pipeline, so do not modify", "default": "" }
+{ "key": "global.nappl.account", "description": "The technical account to login with", "default": "" }
+{ "key": "global.nappl.domain", "description": "The domain of the technical account", "default": "" }
+{ "key": "global.nappl.host", "description": "sets the *nscale Server Application Layer* host to be used. As this is a global option, it can be overridden at component level.", "default": "" }
+{ "key": "global.nappl.instance", "description": "the instance of *nscale Server Application Layer* to be used @internal -- As this is depricated for nscale 10, you should never modify this.", "default": "" }
+{ "key": "global.nappl.password", "description": "The password of the technical accunt (if not set by secret)", "default": "" }
+{ "key": "global.nappl.port", "description": "sets the *nscale Server Application Layer* port to be used. As this is a global option, it can be overridden at component level. if you switch to zero trus mode or change the nappl backend to https, you want to modify this port to 8443", "default": "" }
+{ "key": "global.nappl.secret", "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)", "default": "" }
+{ "key": "global.nappl.ssl", "description": "wether to use ssl or not for the advanced connector", "default": "" }
+{ "key": "global.security.cni.administratorInstance", "description": "sets the instance, from which Administration is allowed", "default": "" }
+{ "key": "global.security.cni.administratorNamespace", "description": "sets the namespace, from which Administration is allowed", "default": "" }
+{ "key": "global.security.cni.createNetworkPolicy", "description": "creates NetworkPolicies for each  component.", "default": "" }
+{ "key": "global.security.cni.defaultEgressPolicy", "description": "if defined, creates a default NetworkPolicy to handle  egress Traffic from the instance. Possible Values: deny, allow, none", "default": "" }
+{ "key": "global.security.cni.defaultIngressPolicy", "description": "if defined, creates a default NetworkPolicy to handle  ingress Traffic to the instance. Possible Values: deny, allow, none", "default": "" }
+{ "key": "global.security.cni.monitoringInstance", "description": "sets the instance, from which Monitoring is allowed", "default": "" }
+{ "key": "global.security.cni.monitoringNamespace", "description": "sets the namespace, from which Monitoring is allowed", "default": "" }
+{ "key": "global.security.cni.pamInstance", "description": "sets the instance, from which Process Automation Modeling is allowed", "default": "" }
+{ "key": "global.security.cni.pamNamespace", "description": "sets the namespace, from which Process Automation Modeling is allowed", "default": "" }
+{ "key": "global.security.zeroTrust", "description": "enables zero trust on the instance. When enabled, no unencrypted http connection is allowed. This will remove all http ports from pods, services, network policies and ingress rules", "default": "" }
+{ "key": "global.telemetry.openTelemetry", "description": "if you use a OpenTelemetry as a telemetry collector, you can enable it here. This will add the annotations to some known pods for the injector to use agents inside the pods for telemetry collection.  This often goes along with the `language` setting in the meta section to tell the  telemetry collector which agent to inject.", "default": "" }
+{ "key": "global.waitImage.name", "description": "defines the nplus toolbox name to be used for the *wait* feature", "default": "" }
+{ "key": "global.waitImage.pullPolicy", "description": "defines the nplus toolbox pull policy to be used for the *wait* feature", "default": "" }
+{ "key": "global.waitImage.repo", "description": "defines the nplus toolbox image to be used for the *wait* feature", "default": "" }
+{ "key": "global.waitImage.tag", "description": "defines the nplus toolbox tag to be used for the *wait* feature @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "ilm.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "ilm.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "ilm.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "ilm.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "ilm.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "ilm.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "mon.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "mon.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "mon.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "mon.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "mon.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "nappl.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nappl.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "nappl.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nappl.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nappl.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "nappl.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "nappljobs.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nappljobs.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "nappljobs.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nappljobs.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nappljobs.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "nstl.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstl.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "nstl.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstl.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstl.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "nstla.clusterService.enabled", "description": "When using multiple nstl Instances with different configurations, you still might want to use a cluster service for HA access This will generate one for you.", "default": "" }
+{ "key": "nstla.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstla.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "nstla.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstla.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstla.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "nstlb.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstlb.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "nstlb.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstlb.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstlb.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "nstlc.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstlc.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "nstlc.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstlc.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstlc.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "nstld.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstld.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "nstld.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstld.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "nstld.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "pam.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "pam.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "pam.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "pam.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "pam.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "pam.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "pipeliner.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "pipeliner.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "pipeliner.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "pipeliner.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "pipeliner.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "pipeliner.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "prepper.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "prepper.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "prepper.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "prepper.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "prepper.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "rms", "description": "rms is not a Ceyoniq component, but a part of nplus", "default": "" }
+{ "key": "rms.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "rms.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "rms.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "rms.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "rms.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "rmsa.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "rmsa.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "rmsa.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "rmsa.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "rmsa.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "rmsb.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "rmsb.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "rmsb.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "rmsb.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "rmsb.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "rs.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "rs.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "rs.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "rs.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "rs.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "sharepoint", "description": "For SharePoint Connector, there is no entry in Github yet, so we set it hardcoded TODO: 9.3: Test again later, if there is a valid github entry.", "default": "" }
+{ "key": "sharepoint.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepoint.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "sharepoint.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepoint.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepoint.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "sharepoint.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "sharepointa.clusterService.contextPath", "description": "Set the context Path for the cluster Ingress. Make sure also the members are listening to this path", "default": "" }
+{ "key": "sharepointa.clusterService.enabled", "description": "When using multiple SharePoint Connectors with different configurations, you still might want to use a retrieval cluster for HA so you can enable the clusterService and define the context path.", "default": "" }
+{ "key": "sharepointa.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepointa.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "sharepointa.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepointa.ingress.contextPath", "description": "Defines the context path of this sharepoint instance, in case you might have multiple instances. We do not want them to consume the same ingress path, because it would block the ingress from being created.", "default": "" }
+{ "key": "sharepointa.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepointa.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "sharepointa.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "sharepointb.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepointb.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "sharepointb.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepointb.ingress.contextPath", "description": "Defines the context path of this sharepoint instance, in case you might have multiple instances. We do not want them to consume the same ingress path, because it would block the ingress from being created.", "default": "" }
+{ "key": "sharepointb.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepointb.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "sharepointb.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "sharepointc.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepointc.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "sharepointc.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepointc.ingress.contextPath", "description": "Defines the context path of this sharepoint instance, in case you might have multiple instances. We do not want them to consume the same ingress path, because it would block the ingress from being created.", "default": "" }
+{ "key": "sharepointc.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepointc.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "sharepointc.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "sharepointd.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepointd.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "sharepointd.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepointd.ingress.contextPath", "description": "Defines the context path of this sharepoint instance, in case you might have multiple instances. We do not want them to consume the same ingress path, because it would block the ingress from being created.", "default": "" }
+{ "key": "sharepointd.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "sharepointd.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "sharepointd.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "web.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "web.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "web.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "web.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "web.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "web.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+{ "key": "webdav.image.name", "description": "sets the name of the image to use for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "webdav.image.repo", "description": "sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons", "default": "" }
+{ "key": "webdav.image.tag", "description": "defines the tag for this component @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "webdav.meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "webdav.meta.wave", "description": "Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler", "default": "" }
+{ "key": "webdav.waitFor", "description": "Defines what condition needs to be met before this components starts", "default": "" }
+
diff --git a/ai/jsonl/chart_mon.jsonl b/ai/jsonl/chart_mon.jsonl
new file mode 100644
index 0000000..07950d4
--- /dev/null
+++ b/ai/jsonl/chart_mon.jsonl
@@ -0,0 +1,130 @@
+{ "chart_name": "nplus-component-mon", "chart_version": "1.2.1500-169", "chart_description": "nscale Monitoring Console, used to provide sensor information from all components to dashboards" }
+{ "key": "activateRmi", "description": "Activates the RMI Interface. Due to security concern, this defaults to `false`", "default": "" }
+{ "key": "activateSsl", "description": "Activates SSL / TLS communication", "default": "" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "javaOpts", "description": "Options for the Java VM", "default": "" }
+{ "key": "javaOpts.javaMaxMem", "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed", "default": "" }
+{ "key": "javaOpts.javaMaxRamPercentage", "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.", "default": "" }
+{ "key": "javaOpts.javaMinMem", "description": "set the minimum memory, java will consume", "default": "" }
+{ "key": "javaOpts.javaMisc", "description": "Any misc Java Options that need to be passed to the container", "default": "" }
+{ "key": "meta", "description": "defines internal constants for nplus. do not change these values", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/chart_nappl.jsonl b/ai/jsonl/chart_nappl.jsonl
new file mode 100644
index 0000000..ad48a03
--- /dev/null
+++ b/ai/jsonl/chart_nappl.jsonl
@@ -0,0 +1,155 @@
+{ "chart_name": "nplus-component-nappl", "chart_version": "1.2.1500-169", "chart_description": "nscale Server Application Layer, the central component in the nscale ecosystem" }
+{ "key": "database", "description": "If you define the database in your values, this DB settings are taken. If you leave this empty, the settings from the config file are used.", "default": "" }
+{ "key": "database.account", "description": "alternative 1: the account name of the technical DB user for nscale", "default": "" }
+{ "key": "database.dialect", "description": "the database dialect to use", "default": "" }
+{ "key": "database.driverclass", "description": "the driver class to use", "default": "" }
+{ "key": "database.name", "description": "the name of the database to use", "default": "" }
+{ "key": "database.password", "description": "alternative 1: the password of the technical DB user for nscale", "default": "" }
+{ "key": "database.passwordEncoded", "description": "weather the DB password is stored encrypted", "default": "" }
+{ "key": "database.schema", "description": "the database schema to use", "default": "" }
+{ "key": "database.secret", "description": "alternative 2: use a secret for the account and password", "default": "" }
+{ "key": "database.url", "description": "the DB URL", "default": "" }
+{ "key": "disableSessionReplication", "description": "enables/disables the session replication for these cluster members.", "default": "" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.includeDefaultPaths", "description": "toggles default paths like index.html, res and engine.properties", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "javaOpts", "description": "Options for the Java VM", "default": "" }
+{ "key": "javaOpts.javaMaxMem", "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed", "default": "" }
+{ "key": "javaOpts.javaMaxRamPercentage", "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.", "default": "" }
+{ "key": "javaOpts.javaMinMem", "description": "set the minimum memory, java will consume", "default": "" }
+{ "key": "javaOpts.javaMisc", "description": "Any misc Java Options that need to be passed to the container", "default": "" }
+{ "key": "jobs", "description": "enables/disables the job affinity / priority for these cluster members", "default": "" }
+{ "key": "kubePing", "description": "sets the serviceAccount for NAPPL. Up to 9.1.1100, this was needed for  the cluster communication (kubePing). Starting 9.1.1201, this is not the case any more If it is left empty, also the automountServiceAccountToken is disabled. If you set Values, they are ignored in Versions > 9.1.1200", "default": "" }
+{ "key": "kubePing.create", "description": "Creates the ServiceAccount (only if Version < 9.1.1200) Later Versions use a Cluster Service and resolve the IP Adresses from the EndpointSlices", "default": "" }
+{ "key": "kubePing.name", "description": "Set the ServiceAccount Name for the kubePing Protocol", "default": "" }
+{ "key": "meta", "description": "defines internal constants for nplus. do not change these values", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCount", "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "priority", "description": "You can give a component a specific priorityClass to implement a quality of service. You can leave this empty, then no priority is set. If you set a class, this class is taken If you additionally enable create, the class is created for you with the value defined.", "default": "" }
+{ "key": "priority.className", "description": "Set the priority class for the Application Layer deployment if desired", "default": "" }
+{ "key": "priority.createClass", "description": "Creates an individual PriorityClass for this instance", "default": "" }
+{ "key": "priority.value", "description": "Sets the priorityValue", "default": "1000000" }
+{ "key": "replicaCount", "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.cni.dbIpRange", "description": "defines the IP Range of out-of-cluster DB Servers, that the nappl is allowed to communicate with.", "default": "" }
+{ "key": "security.cni.sapIpRange", "description": "defines the IP Range of out-of-cluster SAP Servers, that the nappl is allowed to communicate with.", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "sessionCacheStorageType", "description": "Sets the Session Cache Storage Type to HEAP or OFF_HEAP", "default": "" }
+{ "key": "snc.enabled", "description": "Enables the NAPPL SNC to access SAP Systems. Since nscale 8, the configuration is done in the Administration Client.", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "updateStrategy", "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/chart_nstl.jsonl b/ai/jsonl/chart_nstl.jsonl
new file mode 100644
index 0000000..059dcad
--- /dev/null
+++ b/ai/jsonl/chart_nstl.jsonl
@@ -0,0 +1,111 @@
+{ "chart_name": "nplus-component-nstl", "chart_version": "1.2.1500-169", "chart_description": "nscale Server Storage Layer, virtualizing the storage to be used by the nscale Server" }
+{ "key": "accounting", "description": "sets and enables / disables the accounting function. If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`) The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths`", "default": "" }
+{ "key": "checkHighestDocId", "description": "enables checking the highest DocID when starting the server. this only makes sense, if you also set a separate volume for the highest ID This is a backup / restore feature to avoid data mangling", "default": "" }
+{ "key": "dvCheckPath", "description": "sets the path of the highest ID file.", "default": "" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.medium", "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.cni.nstlIpRange", "description": "You might want to access storage layer outside the cluster (proxy concept) To do so, you can add a specific IP Range here, which is set within the  network policy.", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+
diff --git a/ai/jsonl/chart_pam.jsonl b/ai/jsonl/chart_pam.jsonl
new file mode 100644
index 0000000..91cafb3
--- /dev/null
+++ b/ai/jsonl/chart_pam.jsonl
@@ -0,0 +1,137 @@
+{ "chart_name": "nplus-component-pam", "chart_version": "1.2.1500-169", "chart_description": "nscale Process Automation Modeler, providing Web UI Modeler for PAP" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "javaOpts", "description": "Options for the Java VM", "default": "" }
+{ "key": "javaOpts.javaMaxMem", "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed", "default": "" }
+{ "key": "javaOpts.javaMaxRamPercentage", "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.", "default": "" }
+{ "key": "javaOpts.javaMinMem", "description": "set the minimum memory, java will consume", "default": "" }
+{ "key": "javaOpts.javaMisc", "description": "Any misc Java Options that need to be passed to the container", "default": "" }
+{ "key": "meta", "description": "defines internal constants for nplus. do not change these values", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nappl", "description": "The nscale Application Layer, this component should talk to", "default": "" }
+{ "key": "nappl.account", "description": "The technical account to login with", "default": "" }
+{ "key": "nappl.domain", "description": "The domain of the technical account", "default": "" }
+{ "key": "nappl.host", "description": "nappl host name", "default": "" }
+{ "key": "nappl.instance", "description": "instance of the Application Layer, likely `instance1`", "default": "" }
+{ "key": "nappl.password", "description": "The password of the technical accunt (if not set by secret)", "default": "" }
+{ "key": "nappl.port", "description": "nappl port (http 8080 or https 8443)", "default": "" }
+{ "key": "nappl.secret", "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)", "default": "" }
+{ "key": "nappl.ssl", "description": "sets the Advanced Connect to tls", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/chart_pipeliner.jsonl b/ai/jsonl/chart_pipeliner.jsonl
new file mode 100644
index 0000000..b98e832
--- /dev/null
+++ b/ai/jsonl/chart_pipeliner.jsonl
@@ -0,0 +1,130 @@
+{ "chart_name": "nplus-component-pipeliner", "chart_version": "1.2.1500-169", "chart_description": "nscale Pipeliner, the mass import / export tool of nscale" }
+{ "key": "dav.account", "description": "the dav user", "default": "" }
+{ "key": "dav.image", "description": "the Image to use for the DAV server", "default": "" }
+{ "key": "dav.image.pullPolicy", "description": "the DAV server image pull policy", "default": "" }
+{ "key": "dav.password", "description": "password of the dav user", "default": "" }
+{ "key": "dav.secret", "description": "Alternatively, define a secret", "default": "" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "meta", "description": "defines internal constants for nplus. do not change these values", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.defaultConfig", "description": "Sets a configMap with default configuration files that get copied to a new and empty container just before the template folder gets copied. Existing files are not overwritten.", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "replicaCount", "description": "Default ReplicaCount is 0 as the pipeliner requires a working cold.xml", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/chart_prepper.jsonl b/ai/jsonl/chart_prepper.jsonl
new file mode 100644
index 0000000..541d753
--- /dev/null
+++ b/ai/jsonl/chart_prepper.jsonl
@@ -0,0 +1,115 @@
+{ "chart_name": "nplus-prepper", "chart_version": "1.2.1500-169", "chart_description": "nplus Prepper, used to deploy assets prior to component deployment" }
+{ "key": "download", "description": "A list of URLs (Links) to Assets to download before anything else if the download is a .tar.gz, it is automatically untared to /pool/downloads", "default": "" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nappl", "description": "The nscale Application Layer, this component should talk to", "default": "" }
+{ "key": "nappl.account", "description": "The technical account to login with", "default": "" }
+{ "key": "nappl.domain", "description": "The domain of the technical account", "default": "" }
+{ "key": "nappl.host", "description": "nappl host name", "default": "" }
+{ "key": "nappl.instance", "description": "instance of the Application Layer, likely `instance1`", "default": "" }
+{ "key": "nappl.password", "description": "The password of the technical accunt (if not set by secret)", "default": "" }
+{ "key": "nappl.port", "description": "nappl port (http 8080 or https 8443)", "default": "" }
+{ "key": "nappl.secret", "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)", "default": "" }
+{ "key": "nappl.ssl", "description": "sets the Advanced Connect to tls", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "nstl.host", "description": "The dns of the *nscale Server Storage Layer*. This is used to add it to the nappl configuration", "default": "" }
+{ "key": "prerun", "description": "A list of scripts to run before the deployment of Apps", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "rs.host", "description": "The dns of the *nscale rendition Server*. This is used to add it to the nappl configuration", "default": "" }
+{ "key": "run", "description": "A list of scripts to run after the deployment of Apps", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/chart_rms.jsonl b/ai/jsonl/chart_rms.jsonl
new file mode 100644
index 0000000..d740a1c
--- /dev/null
+++ b/ai/jsonl/chart_rms.jsonl
@@ -0,0 +1,171 @@
+{ "chart_name": "nplus-component-rms", "chart_version": "1.2.1500-169", "chart_description": "nplus Remote Management Server incl. RMS and Access Proxy" }
+{ "key": "comps.cmis.displayName", "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change", "default": "" }
+{ "key": "comps.cmis.enabled", "description": "Toggles if this component should be available through RMS", "default": "" }
+{ "key": "comps.cmis.host", "description": "The host, where this component runs", "default": "" }
+{ "key": "comps.cmis.name", "description": "The internal name of the component @internal -- do not change", "default": "" }
+{ "key": "comps.cmis.ports", "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change", "default": "" }
+{ "key": "comps.cmis.ports.http", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.cmis.ports.https", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.cmis.replicaSetType", "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change", "default": "" }
+{ "key": "comps.cmis.restartReplicas", "description": "The amount of replicas to set when starting through the *nscale Administrator* client", "default": "" }
+{ "key": "comps.ilm.displayName", "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change", "default": "" }
+{ "key": "comps.ilm.enabled", "description": "Toggles if this component should be available through RMS", "default": "" }
+{ "key": "comps.ilm.host", "description": "The host, where this component runs", "default": "" }
+{ "key": "comps.ilm.name", "description": "The internal name of the component @internal -- do not change", "default": "" }
+{ "key": "comps.ilm.ports", "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change", "default": "" }
+{ "key": "comps.ilm.ports.http", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.ilm.ports.https", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.ilm.replicaSetType", "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change", "default": "" }
+{ "key": "comps.ilm.restartReplicas", "description": "The amount of replicas to set when starting through the *nscale Administrator* client", "default": "" }
+{ "key": "comps.mon.displayName", "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change", "default": "" }
+{ "key": "comps.mon.enabled", "description": "Toggles if this component should be available through RMS", "default": "" }
+{ "key": "comps.mon.host", "description": "The host, where this component runs", "default": "" }
+{ "key": "comps.mon.name", "description": "The internal name of the component @internal -- do not change", "default": "" }
+{ "key": "comps.mon.ports", "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change", "default": "" }
+{ "key": "comps.mon.ports.http", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.mon.ports.https", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.mon.ports.tcp", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.mon.replicaSetType", "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change", "default": "" }
+{ "key": "comps.mon.restartReplicas", "description": "The amount of replicas to set when starting through the *nscale Administrator* client", "default": "" }
+{ "key": "comps.nappl", "description": "Values for the nappl component", "default": "" }
+{ "key": "comps.nappl.displayName", "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change", "default": "" }
+{ "key": "comps.nappl.enabled", "description": "Toggles if this component should be available through RMS", "default": "" }
+{ "key": "comps.nappl.host", "description": "The host, where this component runs", "default": "" }
+{ "key": "comps.nappl.name", "description": "The internal name of the component @internal -- do not change", "default": "" }
+{ "key": "comps.nappl.ports", "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change", "default": "" }
+{ "key": "comps.nappl.ports.http", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.nappl.ports.https", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.nappl.replicaSetType", "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change", "default": "" }
+{ "key": "comps.nappl.restartReplicas", "description": "The amount of replicas to set when starting through the *nscale Administrator* client", "default": "" }
+{ "key": "comps.nstl.displayName", "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change", "default": "" }
+{ "key": "comps.nstl.enabled", "description": "Toggles if this component should be available through RMS", "default": "" }
+{ "key": "comps.nstl.host", "description": "The host, where this component runs", "default": "" }
+{ "key": "comps.nstl.name", "description": "The internal name of the component @internal -- do not change", "default": "" }
+{ "key": "comps.nstl.ports", "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change", "default": "" }
+{ "key": "comps.nstl.ports.tcp", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.nstl.ports.tcps", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.nstl.replicaSetType", "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change", "default": "" }
+{ "key": "comps.nstl.restartReplicas", "description": "The amount of replicas to set when starting through the *nscale Administrator* client", "default": "" }
+{ "key": "comps.pipeliner.displayName", "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change", "default": "" }
+{ "key": "comps.pipeliner.enabled", "description": "Toggles if this component should be available through RMS", "default": "" }
+{ "key": "comps.pipeliner.host", "description": "The host, where this component runs", "default": "" }
+{ "key": "comps.pipeliner.name", "description": "The internal name of the component @internal -- do not change", "default": "" }
+{ "key": "comps.pipeliner.ports", "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change", "default": "" }
+{ "key": "comps.pipeliner.ports.tcp", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.pipeliner.replicaSetType", "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change", "default": "" }
+{ "key": "comps.pipeliner.restartReplicas", "description": "The amount of replicas to set when starting through the *nscale Administrator* client", "default": "" }
+{ "key": "comps.rs.displayName", "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change", "default": "" }
+{ "key": "comps.rs.enabled", "description": "Toggles if this component should be available through RMS", "default": "" }
+{ "key": "comps.rs.host", "description": "The host, where this component runs", "default": "" }
+{ "key": "comps.rs.name", "description": "The internal name of the component @internal -- do not change", "default": "" }
+{ "key": "comps.rs.ports", "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change", "default": "" }
+{ "key": "comps.rs.ports.http", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.rs.ports.https", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.rs.replicaSetType", "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change", "default": "" }
+{ "key": "comps.rs.restartReplicas", "description": "The amount of replicas to set when starting through the *nscale Administrator* client", "default": "" }
+{ "key": "comps.web.displayName", "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change", "default": "" }
+{ "key": "comps.web.enabled", "description": "Toggles if this component should be available through RMS", "default": "" }
+{ "key": "comps.web.host", "description": "The host, where this component runs", "default": "" }
+{ "key": "comps.web.name", "description": "The internal name of the component @internal -- do not change", "default": "" }
+{ "key": "comps.web.ports", "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change", "default": "" }
+{ "key": "comps.web.ports.http", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.web.ports.https", "description": "proxied port @internal -- do not change", "default": "" }
+{ "key": "comps.web.replicaSetType", "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change", "default": "" }
+{ "key": "comps.web.restartReplicas", "description": "The amount of replicas to set when starting through the *nscale Administrator* client", "default": "" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.medium", "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.cni.adminIpRange", "description": "defines the IP Range of out-of-cluster Administrator Workplaces that are allowed to access the RMS Server.", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+
diff --git a/ai/jsonl/chart_rs.jsonl b/ai/jsonl/chart_rs.jsonl
new file mode 100644
index 0000000..d48bc89
--- /dev/null
+++ b/ai/jsonl/chart_rs.jsonl
@@ -0,0 +1,131 @@
+{ "chart_name": "nplus-component-rs", "chart_version": "1.2.1500-169", "chart_description": "nscale Rendition Server, providing means to format-convert common file types" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "javaOpts", "description": "Options for the Java VM", "default": "" }
+{ "key": "javaOpts.javaMaxMem", "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed", "default": "" }
+{ "key": "javaOpts.javaMaxRamPercentage", "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.", "default": "" }
+{ "key": "javaOpts.javaMinMem", "description": "set the minimum memory, java will consume", "default": "" }
+{ "key": "javaOpts.javaMisc", "description": "Any misc Java Options that need to be passed to the container", "default": "" }
+{ "key": "meta", "description": "defines internal constants for nplus. do not change these values", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCount", "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "replicaCount", "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "updateStrategy", "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/chart_sharepoint.jsonl b/ai/jsonl/chart_sharepoint.jsonl
new file mode 100644
index 0000000..ed102a9
--- /dev/null
+++ b/ai/jsonl/chart_sharepoint.jsonl
@@ -0,0 +1,181 @@
+{ "chart_name": "nplus-component-sharepoint", "chart_version": "1.2.1500-169", "chart_description": "nscale SharePoint Connector, providing SP archiving to the Instance" }
+{ "key": "clusterService.contextPath", "description": "set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances)", "default": "" }
+{ "key": "connector.cTagPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.eTagPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.idPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.listItemIdPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.nscaleExpirationPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.nscaleGdprRelevantPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.nscaleLegalHidePropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.nscaleLegalHoldPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.nscaleRetentionPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.parentIdPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.sharePointChangeTokenPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.sharePointCreatedPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.sharePointCreatorPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.sharePointEditedPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.sharePointEditorPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.stubIdPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.stubListItemIdPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "connector.webUrlPropertyName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "doInitialCrawl", "description": "toggle initial crawling. This value is mandatory.", "default": "" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "javaOpts", "description": "Options for the Java VM", "default": "" }
+{ "key": "javaOpts.javaMaxMem", "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed", "default": "" }
+{ "key": "javaOpts.javaMaxRamPercentage", "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.", "default": "" }
+{ "key": "javaOpts.javaMinMem", "description": "set the minimum memory, java will consume", "default": "" }
+{ "key": "javaOpts.javaMisc", "description": "Any misc Java Options that need to be passed to the container", "default": "" }
+{ "key": "management.port", "description": "see mail from Manuel, 30.7.2024", "default": "" }
+{ "key": "management.security", "description": "see mail from Manuel, 30.7.2024", "default": "" }
+{ "key": "management.ssl", "description": "see mail from Manuel, 30.7.2024", "default": "" }
+{ "key": "meta", "description": "defines internal constants for nplus. do not change these values", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nappl", "description": "The nscale Application Layer, this component should talk to", "default": "" }
+{ "key": "nappl.account", "description": "The technical account to login with", "default": "" }
+{ "key": "nappl.baseFolder", "description": "The base folder, this component should write to", "default": "" }
+{ "key": "nappl.docArea", "description": "The document area, this component should write to", "default": "" }
+{ "key": "nappl.domain", "description": "The domain of the technical account", "default": "" }
+{ "key": "nappl.host", "description": "nappl host name", "default": "" }
+{ "key": "nappl.instance", "description": "instance of the Application Layer, likely `instance1`", "default": "" }
+{ "key": "nappl.password", "description": "The password of the technical accunt (if not set by secret)", "default": "" }
+{ "key": "nappl.port", "description": "nappl port (http 8080 or https 8443)", "default": "" }
+{ "key": "nappl.secret", "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)", "default": "" }
+{ "key": "nappl.ssl", "description": "sets the Advanced Connect to tls", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "parallelRequests", "description": "amount of parallel requests", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "sharepoint.clientCertPw", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "sharepoint.clientId", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "sharepoint.doCheckOut", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "sharepoint.secret", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "sharepoint.serviceBusConnectionString", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "sharepoint.serviceBusQueueName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "sharepoint.serviceBusRetentionConnectionString", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "sharepoint.serviceBusRetentionQueueName", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "sharepoint.serviceBusTopicNameConfigUpdate", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "sharepoint.spHost", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "sharepoint.tenantId", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "sharepoint.triggerProperty", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "sharepoint.webUserPw", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "ssl.keyAlias", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "ssl.keyPassword", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "ssl.keystore", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "ssl.keystorePassword", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "ssl.keystoreSecret", "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/chart_web.jsonl b/ai/jsonl/chart_web.jsonl
new file mode 100644
index 0000000..3b42ea6
--- /dev/null
+++ b/ai/jsonl/chart_web.jsonl
@@ -0,0 +1,151 @@
+{ "chart_name": "nplus-component-web", "chart_version": "1.2.1500-169", "chart_description": "nscale Web, providing a modern Web UI to nscale users" }
+{ "key": "authType", "description": "Set the authentication type login, basic, negotiate, implicit ntlmv2, kerberos", "default": "" }
+{ "key": "customizingMode", "description": "If this setting is enabled, layouts will update immediately when changes are made. It is no longer necessary to re-register or restart the service. If this setting is not activated, the automatic update of the metamodel is turned off. We recommend not using this setting in productive systems because it reduces system performance.", "default": "" }
+{ "key": "disableUsernamePassword", "description": "surpresses the login dialog", "default": "" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "immediateFederatedLogin", "description": "directly log in via identity providers", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "javaOpts", "description": "Options for the Java VM", "default": "" }
+{ "key": "javaOpts.javaMaxMem", "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed", "default": "" }
+{ "key": "javaOpts.javaMaxRamPercentage", "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.", "default": "" }
+{ "key": "javaOpts.javaMinMem", "description": "set the minimum memory, java will consume", "default": "" }
+{ "key": "javaOpts.javaMisc", "description": "Any misc Java Options that need to be passed to the container", "default": "" }
+{ "key": "meta", "description": "defines internal constants for nplus. do not change these values", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "metamodelMode", "description": "Refreshes the metamodel mode", "default": "" }
+{ "key": "minReplicaCount", "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.defaultConfig", "description": "Sets a configMap with default configuration files that get copied to a new and empty container just before the template folder gets copied. Existing files are not overwritten.", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.medium", "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nappl", "description": "The nscale Application Layer, this component should talk to", "default": "" }
+{ "key": "nappl.account", "description": "The technical account to login with", "default": "" }
+{ "key": "nappl.domain", "description": "The domain of the technical account", "default": "" }
+{ "key": "nappl.host", "description": "nappl host name", "default": "" }
+{ "key": "nappl.instance", "description": "instance of the Application Layer, likely `instance1`", "default": "" }
+{ "key": "nappl.password", "description": "The password of the technical accunt (if not set by secret)", "default": "" }
+{ "key": "nappl.port", "description": "nappl port (http 8080 or https 8443)", "default": "" }
+{ "key": "nappl.secret", "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)", "default": "" }
+{ "key": "nappl.ssl", "description": "sets the Advanced Connect to tls", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "oauthDomains", "description": "OAuth nscale domains", "default": "" }
+{ "key": "replicaCount", "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "sameSite", "description": "nscale SameSite Cookie Header", "default": "" }
+{ "key": "samlDomains", "description": "SAML nscale domains", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "smartCrossgrade", "description": "Enable Crossgrade for Smart Layouts", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "updateStrategy", "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/chart_webdav.jsonl b/ai/jsonl/chart_webdav.jsonl
new file mode 100644
index 0000000..a206d0c
--- /dev/null
+++ b/ai/jsonl/chart_webdav.jsonl
@@ -0,0 +1,140 @@
+{ "chart_name": "nplus-component-webdav", "chart_version": "1.2.1500-169", "chart_description": "nscale WebDAV Connector, providing a standard WebDAV interface to the Instance" }
+{ "key": "env", "description": "Sets additional environment variables for the configuration.", "default": "" }
+{ "key": "envMap", "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.", "default": "" }
+{ "key": "envSecret", "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.", "default": "" }
+{ "key": "fullnameOverride", "description": "This overrides the output of the internal fullname function", "default": "" }
+{ "key": "image", "description": "provide the image to be used for this component", "default": "" }
+{ "key": "image.name", "description": "the name of the image to use", "default": "" }
+{ "key": "image.pullSecrets", "description": "you can provide your own pullSecrets, in case you use a private repo.", "default": "" }
+{ "key": "image.repo", "description": "if you use a private repo, feel free to set it here", "default": "" }
+{ "key": "image.tag", "description": "the tag of the image to use", "default": "" }
+{ "key": "ingress", "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)", "default": "" }
+{ "key": "ingress.annotations", "description": "Adds extra Annotations to the ingress", "default": "" }
+{ "key": "ingress.backendProtocol", "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.", "default": "`http` <br> `https` in zero trust mode" }
+{ "key": "ingress.class", "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one", "default": "`public`" }
+{ "key": "ingress.contextPath", "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.", "default": "" }
+{ "key": "ingress.cookie", "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web", "default": "" }
+{ "key": "ingress.deny", "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.", "default": "" }
+{ "key": "ingress.domain", "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here", "default": "" }
+{ "key": "ingress.enabled", "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.", "default": "" }
+{ "key": "ingress.inputPath", "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.namespace", "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list", "default": "\"ingress, kube-system, ingress-nginx\"" }
+{ "key": "ingress.proxyReadTimeout", "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.", "default": "" }
+{ "key": "ingress.rewriteTarget", "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.", "default": "" }
+{ "key": "ingress.secret", "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance", "default": "`{{ .this.ingress.domain }}-tls`" }
+{ "key": "ingress.whitelist", "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers", "default": "" }
+{ "key": "javaOpts", "description": "Options for the Java VM", "default": "" }
+{ "key": "javaOpts.javaMaxMem", "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed", "default": "" }
+{ "key": "javaOpts.javaMaxRamPercentage", "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.", "default": "" }
+{ "key": "javaOpts.javaMinMem", "description": "set the minimum memory, java will consume", "default": "" }
+{ "key": "javaOpts.javaMisc", "description": "Any misc Java Options that need to be passed to the container", "default": "" }
+{ "key": "meta", "description": "defines internal constants for nplus. do not change these values", "default": "" }
+{ "key": "meta.componentVersion", "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify", "default": "" }
+{ "key": "meta.language", "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.", "default": "" }
+{ "key": "meta.ports", "description": "lists the ports this component exposes. This is important for zero trust mode and others.", "default": "" }
+{ "key": "meta.ports.http", "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.https", "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.rmi", "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcp", "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.ports.tcps", "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.", "default": "" }
+{ "key": "meta.provider", "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.serviceContainer", "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any", "default": "" }
+{ "key": "meta.stage", "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)", "default": "" }
+{ "key": "meta.tenant", "description": "sets tenant information to be able to invoice per use in a cloud environment", "default": "" }
+{ "key": "meta.type", "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.", "default": "" }
+{ "key": "meta.wave", "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation", "default": "" }
+{ "key": "minReplicaCount", "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.", "default": "" }
+{ "key": "minReplicaCountType", "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer", "default": "" }
+{ "key": "mounts.caCerts", "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.", "default": "" }
+{ "key": "mounts.caCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.caCerts.paths", "description": "Sets the path to the certs folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.caCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts", "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here", "default": "" }
+{ "key": "mounts.componentCerts.configMap", "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.componentCerts.paths", "description": "Sets the path to the component certs. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.componentCerts.secret", "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting", "default": "" }
+{ "key": "mounts.conf", "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment", "default": "" }
+{ "key": "mounts.conf.path", "description": "Sets the path to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.conf.paths", "description": "Sets a list of paths to the conf files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.class", "description": "Sets the class of the data disk", "default": "" }
+{ "key": "mounts.data.path", "description": "Sets the path to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.data.size", "description": "Sets the size of the data disk", "default": "" }
+{ "key": "mounts.data.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.disk.class", "description": "Sets the class of the disk", "default": "" }
+{ "key": "mounts.disk.enabled", "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.", "default": "" }
+{ "key": "mounts.disk.migration", "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!", "default": "" }
+{ "key": "mounts.disk.path", "description": "Sets the path to the disk files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.paths", "description": "Sets a list of paths to the data files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.disk.size", "description": "Sets the size of the disk", "default": "" }
+{ "key": "mounts.disk.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.file.class", "description": "Sets the class of the shared disk", "default": "" }
+{ "key": "mounts.file.path", "description": "Sets the path to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.paths", "description": "Sets a list of paths to the shared files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.file.size", "description": "Sets the size of the shared disk", "default": "" }
+{ "key": "mounts.file.volumeName", "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one", "default": "" }
+{ "key": "mounts.fonts", "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool", "default": "" }
+{ "key": "mounts.fonts.path", "description": "Sets the path to the fonts folder. @internal -- do not change this value", "default": "" }
+{ "key": "mounts.generic", "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.", "default": "" }
+{ "key": "mounts.license", "description": "some nscale Components require a license file and this defines it's location", "default": "" }
+{ "key": "mounts.license.path", "description": "Sets the path to the license files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs", "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable", "default": "" }
+{ "key": "mounts.logs.path", "description": "Sets the path to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.paths", "description": "Sets a list of paths to the log files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.logs.size", "description": "Sets the size of the log disk (all paths)", "default": "" }
+{ "key": "mounts.pool.path", "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.ptemp.path", "description": "Sets the path for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.ptemp.paths", "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp", "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only", "default": "" }
+{ "key": "mounts.temp.path", "description": "Sets the path to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.paths", "description": "Sets a list of paths to the temporary files @internal -- do not change this value", "default": "" }
+{ "key": "mounts.temp.size", "description": "Sets the size of the temporary disk (all paths)", "default": "" }
+{ "key": "nameOverride", "description": "This overrides the output of the internal name function", "default": "" }
+{ "key": "nappl", "description": "The nscale Application Layer, this component should talk to", "default": "" }
+{ "key": "nappl.account", "description": "The technical account to login with", "default": "" }
+{ "key": "nappl.domain", "description": "The domain of the technical account", "default": "" }
+{ "key": "nappl.host", "description": "nappl host name", "default": "" }
+{ "key": "nappl.instance", "description": "instance of the Application Layer, likely `instance1`", "default": "" }
+{ "key": "nappl.password", "description": "The password of the technical accunt (if not set by secret)", "default": "" }
+{ "key": "nappl.port", "description": "nappl port (http 8080 or https 8443)", "default": "" }
+{ "key": "nappl.secret", "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)", "default": "" }
+{ "key": "nappl.ssl", "description": "sets the Advanced Connect to tls", "default": "" }
+{ "key": "nodeSelector", "description": "select specific nodes for this component", "default": "" }
+{ "key": "replicaCount", "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.", "default": "" }
+{ "key": "resources", "description": "Assigns hardware resources to container", "default": "" }
+{ "key": "resources.limits", "description": "Limits the maximum resources", "default": "" }
+{ "key": "resources.limits.cpu", "description": "The maximum allowed CPU for the container", "default": "" }
+{ "key": "resources.limits.memory", "description": "The maximum allowed RAM for the container", "default": "" }
+{ "key": "resources.requests", "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount", "default": "" }
+{ "key": "resources.requests.cpu", "description": "Set the share of guaranteed CPU to the container.", "default": "" }
+{ "key": "resources.requests.memory", "description": "Set the share of guaranteed RAM to the container", "default": "" }
+{ "key": "security", "description": "Security Section defining default runtime environment for your container", "default": "" }
+{ "key": "security.containerSecurityContext.allowPrivilegeEscalation", "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.capabilities", "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this", "default": "" }
+{ "key": "security.containerSecurityContext.readOnlyRootFilesystem", "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroup", "description": "The file system group as which new files are created @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.fsGroupChangePolicy", "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.podSecurityContext.runAsUser", "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this", "default": "" }
+{ "key": "security.zeroTrust", "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes", "default": "`false`" }
+{ "key": "service.annotations", "description": "adds extra Annotations to the service", "default": "" }
+{ "key": "service.enabled", "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.", "default": "" }
+{ "key": "service.selector", "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type", "default": "" }
+{ "key": "telemetry", "description": "Settings for telemetry tools", "default": "" }
+{ "key": "telemetry.openTelemetry", "description": "turns Open Telemetry on", "default": "" }
+{ "key": "telemetry.serviceName", "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"", "default": "" }
+{ "key": "template", "description": "provide extra settings for pod templates", "default": "" }
+{ "key": "template.annotations", "description": "set additional annotations for pods", "default": "" }
+{ "key": "template.labels", "description": "set additional labels for pods", "default": "" }
+{ "key": "terminationGracePeriodSeconds", "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults", "default": "" }
+{ "key": "timezone", "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.", "default": "`Europe/Berlin`" }
+{ "key": "tolerations", "description": "Set tolerations for this component", "default": "" }
+{ "key": "updateStrategy", "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.", "default": "" }
+{ "key": "utils.debug", "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide", "default": "`false`" }
+{ "key": "utils.disableWait", "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.", "default": "`false`" }
+{ "key": "utils.disableWave", "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.", "default": "`false`" }
+{ "key": "utils.includeNamespace", "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later", "default": "`true`" }
+{ "key": "utils.maintenance", "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.", "default": "`false`" }
+{ "key": "utils.renderComments", "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD", "default": "`true`" }
+{ "key": "waitFor", "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.", "default": "" }
+
diff --git a/ai/jsonl/common.jsonl b/ai/jsonl/common.jsonl
new file mode 100644
index 0000000..4e76521
--- /dev/null
+++ b/ai/jsonl/common.jsonl
@@ -0,0 +1,4 @@
+{"chapter": "Timzone (Package tzdata) setting", "level": 2, "text": "You can set the timezone in the PODs by\n- per Component:\n`timezone: \"Europe/Berlin\"`\n- per Instance:\n`global.timezone: \"Europe/Berlin\"`\n- per Environment:\n`global.environment.timezone: \"Europe/Berlin\"`\nThis is compatible to the *tzdata* package. If the image you use uses a different timezone package und thus a environment variable other than `TZ`, you can also set any global ENV Variables by\n- per Component:\n`env.TZ: \"Europe/Berlin\"`\n- per Instance:\n`global.env.TZ: \"Europe/Berlin\"`\n- per Environment:\n`global.environment.env.TZ: \"Europe/Berlin\"`\nIf you do not set the timezone, **it defaults to `Europe/Berlin`** and the `TZ` env variable.\n"}
+{"chapter": "Placement", "level": 2, "text": "The inter pod anti-affinity is set by default to avoid a placement of two replicas of the same set to one node.\nThis is done for nappl, rs, ilm, cmis, web, webdav based on instance, component and type\nFor the nstl, this is handled by instance and type only, since the nstl does not use replicas and we are using different sets to ensure HA.\nAdditionally, you can set the scheduler to avoid or prefer specific nodes by setting *tolerations* and use *nodeSelectors*:\n- `tolerations`\nList of Kubernetes [`tolerations`](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/) to add to the component\n- `nodeSelector`\nKubernetes [`nodeSelector`](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector) to add to the component\n"}
+{"chapter": "Maintenance Mode", "level": 2, "text": "You can start the component in *Maintenance Mode*, starting the pod without starting the service, providing the possibility to gain access to the container to perform recovery tasks that need to be done offline.\nIn order to do this:\n- All *waitFor* definitions are ignored\n- All *Health Checks* are ignored\n- The container starts in idle\n"}
+{"chapter": "minReplicaCountType", "level": 2, "text": "If you set minReplicaCountType, a podDesruptionBudget will be created with this value as minReplicaCount. It will select pods based on the type of this component.\nThis is used for components, that do **not** support multiple replicas (for example sharepoint or storage layer).\nIf the component does in fact support replicas, it is better to use `minReplicaCount` instead.\nAlso pay attention to only set this on one ReplicaSet of this type, not all.\nPlease refer to the HA sample for more information.\n"}
diff --git a/ai/jsonl/cookbook.jsonl b/ai/jsonl/cookbook.jsonl
new file mode 100644
index 0000000..603b62f
--- /dev/null
+++ b/ai/jsonl/cookbook.jsonl
@@ -0,0 +1,57 @@
+{"chapter": "Preparing the K8s Cluster", "level": 1, "text": "*nplus* Charts bring some custom resources, *Application*, *Instance* and *Component*. they are created during deployment of a chart and then updated by the environment operator every time the status changes.\nTo make this work, you will need to have the *Custom Resource Definitions* applied to your cluster prior to deploying any environment or component. This deployment is handled by the *Cluster Chart*.\n```bash\nhelm install nplus/nplus-cluster\n```\nThe *CRDs* are grouped into *nscale* and *nplus* (both synonym), so that you can either query for\n```bash\nkubectl get instance\nkubectl get component\nkubectl get application\n```\nor simply all at once with\n```bash\nkubectl get nscale -A\n```\nthe output looks like this (shortened output, showing the installed samples):\n```bash\n$ kubectl get nscale -A\nNAMESPACE   NAME                                                    INSTANCE                     COMPONENT       TYPE            VERSION        STATUS\nempty-sim   component.nplus.cloud/database                          empty-sim                    database        database        16             healthy\nempty-sim   component.nplus.cloud/nappl                             empty-sim                    nappl           core            9.2.1302       healthy\nlab         component.nplus.cloud/demo-centralservices-s3-nstl      demo-centralservices-s3      nstl            nstl            9.2.1302       healthy\nlab         component.nplus.cloud/demo-ha-web                       demo-ha                      web             web             9.2.1300       redundant\nlab         component.nplus.cloud/demo-ha-webdav                    demo-ha                      webdav          webdav          9.2.1000       redundant\nlab         component.nplus.cloud/demo-ha-zerotrust-administrator   demo-ha-zerotrust            administrator   administrator   9.2.1300       healthy\nlab         component.nplus.cloud/no-provisioner-nstl               no-provisioner               nstl            nstl            9.2.1302       healthy\nlab         component.nplus.cloud/no-provisioner-rs                 no-provisioner               rs              rs              9.2.1201       starting\nlab         component.nplus.cloud/no-provisioner-web                no-provisioner               web             web             9.2.1300       healthy\nlab         component.nplus.cloud/sbs-nappl                         sbs                          nappl           core            9.2.1302       healthy\nNAMESPACE   NAME                                                    INSTANCE            APPLICATION   VERSION        STATUS\nempty-sim   application.nplus.cloud/application                     empty-sim           application   9.2.1303-123   healthy\nempty-sim   application.nplus.cloud/prepper                         empty-sim           prepper       1.2.1300       healthy\nlab         application.nplus.cloud/demo-ha-zerotrust-application   demo-ha-zerotrust   application   9.2.1303-123   healthy\nlab         application.nplus.cloud/demo-shared-application         demo-shared         application   9.2.1303-123   healthy\nlab         application.nplus.cloud/sbs-sbs                         sbs                 SBS           9.2.1303-123   healthy\nlab         application.nplus.cloud/tenant-application              tenant              application   9.2.1303-123   healthy\nNAMESPACE   NAME                                              HANDLER   VERSION    TENANT   STATUS\nempty-sim   instance.nplus.cloud/empty-sim                    manual    9.2.1302            healthy\nlab         instance.nplus.cloud/default                      manual    9.2.1302            healthy\nlab         instance.nplus.cloud/demo-centralservices         manual    9.2.1302            healthy\nlab         instance.nplus.cloud/rms                          manual    9.2.1302            healthy\nlab         instance.nplus.cloud/sbs                          manual    9.2.1302            healthy\nlab         instance.nplus.cloud/tenant                       manual    9.2.1302            healthy\n```\n"}
+{"chapter": "K8s namespace aka *nplus environment*", "level": 1, "text": "*nplus instances* are deployed into K8s namespaces. Always. even if you do not specify a namespace, it uses a namespace: `default`.\nIn order to use this namespace for *nplus instances*, you need to deploy some shared *nplus components* into it, which are used by the instances. This is done by the environment chart:\n```\nhelm install \\\n--values demo.yaml \\\ndemo nplus/nplus-environment\n```\nAfter that, the K8s namespace is a valid *nplus environment* that can house multiple *nplus instances*.\n"}
+{"chapter": "deploying assets into the environment", "level": 2, "text": "Most likely, you will need assets to be used by your instances. Fonts for example: The *nscale Rendition Server* and die *nscale Server Application Layer* both require the Microsoft fonts, that are not allowed to be distributed by neither nscale nor nplus. So this example shows how to upload some missing pieces into the environment:\n```\nkubectl cp ./apps/app-installer-9.0.1202.jar nplus-toolbox-0:/conf/pool\nkubectl cp ./fonts nplus-toolbox-0:/conf/pool\nkubectl cp ./copy-snippet.sh nplus-toolbox-0:/conf/pool/scripts\nkubectl cp ./test.md nplus-toolbox-0:/conf/pool/snippets\nkubectl cp ./snc nplus-toolbox-0:/conf/pool\n```\nAlternatively, you can also use a `prepper` component, that you can activate on the environment chart, to download assets from any web site and deploy them into the environment:\n```\ncomponents:\nprepper: true\nprepper:\ndownload:\n- \"https://git.nplus.cloud/public/nplus/raw/branch/master/assets/sample.tar.gz\"\n```\nPlease see the prepper [README.md](../../charts/prepper/README.md) for more information.\n"}
+{"chapter": "Operator Web UI", "level": 2, "text": "The environment comes with the operator, responsible for managing / controlling the [custom resources](../cluster/README.md). It has a Web UI, that can be enabled in the environment chart.\n![screenshot operator](assets/operator.png)\n"}
+{"chapter": "*namespace*-less manifests", "level": 2, "text": "Speaking of namespaces: Sometimes you want to drop the namespace from your manifest. This can be done by\n```yaml\nutils:\nincludeNamespace: false\n```\nwhen you then call\n```bash\nhelm template myInstance nplus/nplus-instance > myInstance.yaml\n```\nthe manifest in `myInstance.yaml` will **not** have a namespace set, so you can apply it to multiple namespaces later:\n```bash\nkubectl apply --namespace dev -f myInstance.yaml\nkubectl apply --namespace qa -f myInstance.yaml\nkubectl apply --namespace prod -f myInstance.yaml\n```\n"}
+{"chapter": "Installing Document Areas", "level": 1, "text": ""}
+{"chapter": "Creating an empty document area while deploying an Instance", "level": 2, "text": "This is the simplest sample, just the core services with an empty document area:\n```\nhelm install \\\n--values samples/application/empty.yaml \\\n--values samples/environment/demo.yaml \\\nempty nplus/nplus-instance\n```\nThe empty Document Area is created with\n```yaml\ncomponents:\napplication: true\nprepper: true\n\napplication:\ndocAreas:\n- id: \"Sample\"\nrun:\n- \"/pool/downloads/sample.sh\"\nprepper:\ndownload:\n- \"https://git.nplus.cloud/public/nplus/raw/branch/master/assets/sample.tar.gz\"\n```\nThis turns on the *prepper* component, used to download a sample tarball from git. It will also extract the tarball into the `downloads` folder that is created on the *pool* automatically.\nThen, after the Application Layer is running, a document area `Sample` is created. The content of the sample script will be executed.\nIf you use **argoCD** as deployment tool, you would go with\n```\nhelm install \\\n--values samples/application/empty.yaml \\\n--values samples/environment/demo.yaml \\\nempty-argo nplus/nplus-instance-argo\n```\n"}
+{"chapter": "Deploying the *SBS* Apps to a new document area", "level": 2, "text": "In the SBS scenario, some Apps are installed into the document area:\n```bash\nhelm install \\\n--values samples/applications/sbs.yaml \\\n--values samples/environment/demo.yaml \\\nsbs nplus/nplus-instance\n```\nThe values look like this:\n```yaml\ncomponents:\napplication: true\napplication:\nnameOverride: SBS\ndocAreas:\n- id: \"SBS\"\nname: \"DocArea with SBS\"\ndescription: \"This is a sample DocArea with the SBS Apps installed\"\napps:\n- \"/pool/nstore/bl-app-9.0.1202.zip\"\n- \"/pool/nstore/gdpr-app-9.0.1302.zip\"\n...\n- \"/pool/nstore/ts-app-9.0.1302.zip\"\n- \"/pool/nstore/ocr-base-9.0.1302.zip\"\n```\nThis will create a document area `SBS` and install the SBS Apps into it.\n"}
+{"chapter": "Accounting in nstl", "level": 1, "text": "To collect Accounting Data in *nscale Server Storage Layer*, you can enable the nstl accouting feature by setting `accounting: true`.\nThis will create the accounting csv files in *ptemp* under `<instance>/<component>/accounting`.\nAdditionally, you can enable a log forwarder printing it to stdout.\n```\nnstl:\naccounting: true\nlogForwarder:\n- name: Accounting\npath: \"/opt/ceyoniq/nscale-server/storage-layer/accounting/*.csv\"\n```\n"}
+{"chapter": "(auto-) certificates and the pitfalls of *.this*", "level": 1, "text": "*nplus* will automatically generate certificates for your ingress. It either uses an issuer like *cert-manager* or generates a *self-signed-certificate*.\nIn your production environment though, you might want to take more control over the certificate generation process and don't leave it to *nplus* to automatically take care of it.\nIn that case, you want to switch the automation *off*.\nTo do so, you need to understand what is happening internally:\n- if `.this.ingress.issuer` is set, the chart requests this issuer to generate a tls secret with the name `.this.ingress.secret`\nby creating a certificate resource with the name of the domain `.this.ingress.domain`\n- else, so no issuer is set, the chart checks wether the flag `.this.ingress.createSelfSignedCertificate` is set to `true` and\ngenerates a tls secret with the name `.this.ingress.secret`\n- else, so neither issuer nor createSelfSignedCertificate are set, the charts will not generate anything\nThe way how `.this` works is, that it gathers the key from `.Values.global.environment`, `.Values.global` and then `.Values` and flattens them merged into `.this`so that you can set your values\non different levels.\nHowever, the *merge* function overwrites non exising values and also boolean `true` overwrites a boolean `false`, not just the nil values. So to make sure we still can cancel functionality\nby setting `null`or `false`, there is a forth merge which is set to forcefully overwrite existing keys: `override`, which can also be set on *environment*, *global* or on the *component* level.\nSo the correct way to cancel the generation process is to force the issuer to null (which will cancel the *cert-manager* generation) and also force `createSelfSignedCertificate` to false (to cancel the *self-signed-certificate* generation):\n```yaml\nglobal:\noverride:\ningress:\nenabled: true\nsecret: myCertificate\nissuer: null\ncreateSelfSignedCertificate: false\n```\nThis makes sure, you will get an ingress, that uses the tls certificate in the secret `myCertificate` for encryption and does not generate anything.\n"}
+{"chapter": "Grouping Instances", "level": 1, "text": "Sometimes Instances become quite large with many components. If you work on them with multiple team members, you end up having to synchronize the deployment of the Instances.\nYou can easily rip large Instances apart using the `group` tag, joining multiple Instances into one group and making sure the NetworkPolicies are opened to pods from other Instances within the Instance Group.\n```yaml\nglobal:\ninstance:\n# -- despite the instance name, all components within this group will be prefixed\n# with the group (unless the group name and the environment name are not identical)\n# Also this makes sure the network policies are acting on the group, not on the instance.\ngroup: \"sample-group\"\n```\nYou can query the instance group in your code with `.instance.group`.\nExample: We build multiple Instances in one group:\n- sample-group-backend\n- Database\n- nstl\n- rs\n- sample-group-middleware\n- nappl\n- application(s)\n- sample-group-frontend\n- web\n- cmis\nPortainer is showing the group as if it were an single instance:\n![Portainer](assets/portainer.png)\nThe nplus UI is showing the instances of the group:\n![nplus Web Monitoring](assets/monitor.png)\nAnd the nplus CLI is also showing single instances:\n```\n% kubectl get nscale\nNAME                                                                 INSTANCE                         COMPONENT       TYPE            VERSION    STATUS\ncomponent.nplus.cloud/sample-group-cmis                              sample-group-frontend            cmis            cmis            9.2.1200   healthy\ncomponent.nplus.cloud/sample-group-database                          sample-group-backend             database        database        16         healthy\ncomponent.nplus.cloud/sample-group-nappl                             sample-group-middleware          nappl           core            9.2.1302   healthy\ncomponent.nplus.cloud/sample-group-rs                                sample-group-backend             rs              rs              9.2.1201   healthy\ncomponent.nplus.cloud/sample-group-web                               sample-group-frontend            web             web             9.2.1300   healthy\nNAME                                                  HANDLER   VERSION    TENANT   STATUS\ninstance.nplus.cloud/sample-group-backend             manual    9.2.1302            healthy\ninstance.nplus.cloud/sample-group-frontend            manual    9.2.1302            healthy\ninstance.nplus.cloud/sample-group-middleware          manual    9.2.1302            healthy\n```\n"}
+{"chapter": "Sharing Instances", "level": 1, "text": "Some organisations have multiple tenants that share common services, like *nscale Rendition Server* or\nhave a common IT department, thus using only a single *nscale Monitoring Console* acress all tenants.\nThis is the Central Services Part:\n```\nhelm install \\\n--values samples/shared/centralservices.yaml \\\n--values samples/environment/demo.yaml \\\nsample-shared-cs nplus/nplus-instance\n```\nAnd this is the tenant using the Central Services:\n```\nhelm install \\\n--values samples/shared/shared.yaml \\\n--values samples/environment/demo.yaml \\\nsample-shared nplus/nplus-instance\n```\nIf you enable security based on *Network Policies*, you need to add additional Policies to allow access. Please see `shared-networkpolicy.yaml` and `centralservices-networkpolicy.yaml` as an example.\nYou also want to set the *monitoringInstance* in the `global` section of the values file to enable the Network Policy for incoming monitoring traffic.\n```yaml\nglobal:\nsecurity:\ncni:\nmonitoringInstance: sample-shared-cs\n```\n"}
+{"chapter": "Using detached applications", "level": 1, "text": "All the other samples use an application that is deployed **inside of an instance**. However, you can also deploy an application **detached** from the instance as a solo chart.\nThe reason for this is, that you\n- can update the instance without running the application update\n- update the application without touching the instance\n- have multiple applications deployed within one instance\nThere are two major things you need to do:\n1. make sure the application charts sets the instance name of the instance, it should connect to\n2. take the default values of the application match the ones it would get by an instance deployment\nThis is a sample: (find the complete one in the [application.yaml](application.yaml))\n```yaml\nnameOverride: SBS\ndocAreas:\n- id: \"SBS\"\nname: \"DocArea with SBS\"\ndescription: \"This is a sample DocArea with the SBS Apps installed\"\napps:\n...\ninstance:\n# this is the name of the instance, it should belong to\nname: \"sample-detached\"\n"}
+{"chapter": "make sure it can wait for the nappl of the instance to be ready, before it deploys.", "level": 1, "text": "waitImage:\nrepo: cr.nplus.cloud/subscription\nname: toolbox2\ntag: 1.2.1300\npullPolicy: IfNotPresent\nwaitFor:\n- \"-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800\"\n"}
+{"chapter": "Now we define where and what to deploy", "level": 1, "text": "nappl:\nhost: \"{{ .component.prefix }}nappl.{{ .Release.Namespace }}\"\nport: 8080\nssl: false\ninstance: \"nscalealinst1\"\naccount: admin\ndomain: nscale\npassword: admin\nsecret:\nnstl:\nhost: \"{{ .component.prefix }}nstl.{{ .Release.Namespace }}\"\nrs:\nhost: \"{{ .component.prefix }}rs.{{ .Release.Namespace }}\"\n```\n"}
+{"chapter": "High Availability", "level": 1, "text": "To gain a higher level of availability for your Instance, you can\n- create more Kubernetes Cluster Nodes\n- create more replicas of the *nscale* and *nplus* components\n- distribute those replicas across multiple nodes using anti-affinities\nThis is how:\n```\nhelm install \\\n--values samples/ha/values.yaml\n--values samples/environment/demo.yaml \\\nsample-ha nplus/nplus-instance\n```\nThe essents of the values file is this:\n- We use three (3) *nscale Server Application Layer*, two dedicated to user access, one dedicated to jobs\n- if the jobs node fails, the user nodes take the jobs (handled by priority)\n- if one of the user nodes fail, the other one handles the load\n- Kubernetes takes care of restarting nodes should that happen\n- All components run with two replicas\n- Pod anti-affinities handle the distribution\n- any administration component only connects to the jobs nappl, leaving the user nodes to the users\n- PodDisruptionBudgets are defined for the crutial components. These are set via `minReplicaCount` for the components that can support multiple replicas, and `minReplicaCountType` for the **first** replicaSet of the components that do not support replicas, in this case nstla.\n```\nweb:\nreplicaCount: 2\nminReplicaCount: 1\nrs:\nreplicaCount: 2\nminReplicaCount: 1\nilm:\nreplicaCount: 2\nminReplicaCount: 1\ncmis:\nreplicaCount: 2\nminReplicaCount: 1\nwebdav:\nreplicaCount: 2\nminReplicaCount: 1\nnstla:\nminReplicaCountType: 1\nadministrator:\nnappl:\nhost: \"{{ .component.prefix }}nappljobs.{{ .Release.Namespace }}\"\nwaitFor:\n- \"-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 600\"\npam:\nnappl:\nhost: \"{{ .component.prefix }}nappljobs.{{ .Release.Namespace }}\"\nwaitFor:\n- \"-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 600\"\nnappl:\nreplicaCount: 2\nminReplicaCount: 1\njobs: false\nwaitFor:\n- \"-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 600\"\nnappljobs:\nreplicaCount: 1\njobs: true\ndisableSessionReplication: true\ningress:\nenabled: false\nsnc:\nenabled: true\nwaitFor:\n- \"-service {{ .component.prefix }}database.{{ .Release.Namespace }}.svc.cluster.local:5432 -timeout 600\"\napplication:\nnstl:\nhost: \"{{ .component.prefix }}nstl-cluster.{{ .Release.Namespace }}\"\nnappl:\nhost: \"{{ .component.prefix }}nappljobs.{{ .Release.Namespace }}\"\n```\n"}
+{"chapter": "Assigning CPU and RAM", "level": 2, "text": "You **should** assign resources to your components, depending on the load that you expect.\nIn a dev environment, that might be very little and you may be fine with the defaults.\nin a qa or prod environment, this should be wisely controlled, like this:\n```yaml\nnappl:\nresources:\nrequests:\ncpu: \"100m\"         # Minimum 1/10 CPU\nmemory: \"1024Mi\"    # Minimum 1 GB\nlimits:\ncpu: \"2000m\"        # Maximum 2 Cores\nmemory: \"4096Mi\"    # Maximum 4 GB. Java will see this as total.\njavaOpts:\njavaMinMem: \"512m\"    # tell Java to initialize the heap with 512 MB\njavaMaxMem: \"2048m\"   # tell Java to use max 2 GB of heap size\n```\nThere are many discussions going on how much memory you should give to Java processes and how they react. Please see the internet for insight.\n"}
+{"chapter": "Our **current** opinion is:", "level": 4, "text": "Do not limit ram. You are not able to foresee how much Java is really consuming as the heap is only part of the RAM requirement. Java also needs *metaspace*, *code cache* and *thread stack*. Also the *GC* needs some memory, as well as the *symbols*.\nJava will crash when out of memory, so even if you set javaMaxMem == 1/2 limits.memory (what many do), that guarantees nothing and might be a lot of waste.\nSo what you can consider is:\n```yaml\nnappl:\nresources:\nrequests:\ncpu: \"1000m\"        # 1 Core guaranteed\nmemory: \"4096Mi\"    # 4GB guaranteed\nlimits:\ncpu: \"4000m\"        # Maximum 4 Cores\n"}
+{"chapter": "memory:             # No Limit but hardware", "level": 2, "text": "javaOpts:\njavaMinMem: \"1024m\"   # Start with 1 GB\njavaMaxMem: \"3072m\"   # Go up to 3GB (which is only part of it) but be able to take more (up to limit) without crash\n```\nDownside of this approach: If you have a memory leak, it might consume all of your nodes memory without being stopped by a hard limit.\n"}
+{"chapter": "A possible **Alternative**:", "level": 4, "text": "You can set the RAM limit equal to the RAM request and leave the java Memory settings to *automatic*, which basically simulates a server. Java will *see* the limit as being the size of RAM installed in the machine and act accordingly.\n```yaml\nnappl:\nresources:\nrequests:\ncpu: \"1000m\"        # 1 Core guaranteed\nmemory: \"4096Mi\"    # 4GB guaranteed\nlimits:\ncpu: \"4000m\"        # Maximum 4 Cores\nmemory: \"4096Mi\"    # No Limit but hardware\n"}
+{"chapter": "javaOpts:", "level": 1, "text": ""}
+{"chapter": "javaMinMem:           # unset, leaving it to java", "level": 2, "text": ""}
+{"chapter": "javaMaxMem:           # unset, leaving it to java", "level": 2, "text": "```\n"}
+{"chapter": "In a **DEV** environment,", "level": 4, "text": "you might want to do more **overprovisioning**. You could even leave it completely unlimited, as in **DEV** you want to see memory and cpu leaks, so a limit might hide them from your sight.\nSo this is a possible allocation for **DEV**, defining only the bare minimum requests:\n```yaml\nnappl:\nresources:\nrequests:\ncpu: \"1m\"           # 1/1000 Core guaranteed,\n# but can consume all cores of the cluster node if required and available\nmemory: \"512Mi\"     # 512MB guaranteed,\n# but can consume all RAM of the cluster node if required and available\n```\nIn this case, Java will see all node RAM as the limit and use whatever it needs. But as you are in a **dev** environment, there is no load and no users on the machine, so this will not require much.\n"}
+{"chapter": "Resources you should calculate", "level": 2, "text": "The default resources assigned by *nplus* are for demo / testing only and you should definitely assign more ressources to your components.\nHere is a very rough estimate of what you need:\n| Component       | Minimum (Demo and Dev) | Small            | Medium            | Large              | XL   | Remark                                                      |\n| --------------- | ---------------------- | ---------------- | ----------------- | ------------------ | ---- | ----------------------------------------------------------- |\n| ADMIN           | 1 GB RAM, 1 Core       | 2 GB RAM, 1 Core | 2 GB RAM, 1 Core  | 2 GB RAM, 1 Core   |      |                                                             |\n| **Application** | -                      | -                | -                 | -                  |      | Resources required during deployment only                   |\n| CMIS            | 1 GB RAM, 1 Core       | 2 GB RAM, 2 Core | 2 GB RAM, 2 Core  | 2 GB RAM, 2 Core   |      |                                                             |\n| **Database**    | 2 GB RAM, 2 Core       | 4 GB RAM, 4 Core | 8 GB RAM, 6 Core  | 16 GB RAM, 8 Core  | open |                                                             |\n| ILM             | 1 GB RAM, 1 Core       | 2 GB RAM, 2 Core | 2 GB RAM, 2 Core  | 2 GB RAM, 2 Core   |      |                                                             |\n| MON             | 1 GB RAM, 1 Core       | 2 GB RAM, 2 Core | 2 GB RAM, 2 Core  | 2 GB RAM, 2 Core   |      | quite fix                                                   |\n| **NAPPL**       | 2 GB RAM, 2 Core       | 4 GB RAM, 4 Core | 8 GB RAM, 6 Core  | 16 GB RAM, 8 Core  | open | CPU depending on Jobs / Hooks, RAM depending on amount user |\n| **NSTL**        | 500 MB RAM, 1 Core     | 1 GB RAM, 2 Core | 1 GB RAM, 2 Core  | 1 GB RAM, 2 Core   |      | quite fix                                                   |\n| PAM             |                        | 2 GB RAM, 1 Core | 2 GB RAM, 1 Core  | 2 GB RAM, 1 Core   |      |                                                             |\n| PIPELINER       | 2 GB RAM, 2 Core       | 4 GB RAM, 4 Core | 4 GB RAM, 4 Core  | 4 GB RAM, 4 Core   | open | Depending on Core Mode *or* AC Mode, No Session Replication |\n| **RS**          | 1 GB RAM, 1 Core       | 8 GB RAM, 4 Core | 32 GB RAM, 8 Core | 64 GB RAM, 12 Core | open | CPU depending on format type, RAM depending on file size    |\n| SHAREPOINT      |                        | 2 GB RAM, 2 Core | 2 GB RAM, 2 Core  | 2 GB RAM, 2 Core   |      |                                                             |\n| WEB             | 1 GB RAM, 1 Core       | 2 GB RAM, 2 Core | 4 GB RAM, 4 Core  | 8 GB RAM, 4 Core   | open |                                                             |\n| WEBDAV          |                        | 2 GB RAM, 2 Core | 2 GB RAM, 2 Core  | 2 GB RAM, 2 Core   |      |                                                             |\n**Bold** components are required by a *SBS* setup, so here are some estimates per Application:\n| Component | Minimum (Demo and Dev) | Minimum (PROD)    | Recommended (PROD) | Remark             |\n| --------- | ---------------------- | ----------------- | ------------------ | ------------------ |\n| SBS       | 6 GB RAM, 4 Core       | 16 GB RAM, 8 Core | 24 GB RAM, 12 Core | Without WEB Client |\n| eGOV      | TODO                   | TODO              | TODO               | eGOV needs much more CPU than a non eGOV system |\nA word on **eGOV**: The eGOV App brings hooks and jobs, that require much more resources than a *normal* nscale system even with other Apps installed.\n"}
+{"chapter": "Real Resources in DEV Idle", "level": 2, "text": "```\n% kubectl top pods\n...\nsample-ha-administrator-0                                2m           480Mi\nsample-ha-argo-administrator-0                           2m           456Mi\nsample-ha-argo-cmis-5ff7d78c47-kgxsn                     2m           385Mi\nsample-ha-argo-cmis-5ff7d78c47-whx9j                     2m           379Mi\nsample-ha-argo-database-0                                2m           112Mi\nsample-ha-argo-ilm-58c65bbd64-pxgdl                      2m           178Mi\nsample-ha-argo-ilm-58c65bbd64-tpxfz                      2m           168Mi\nsample-ha-argo-mon-0                                     2m           308Mi\nsample-ha-argo-nappl-0                                   5m           1454Mi\nsample-ha-argo-nappl-1                                   3m           1452Mi\nsample-ha-argo-nappljobs-0                               5m           2275Mi\nsample-ha-argo-nstla-0                                   4m           25Mi\nsample-ha-argo-nstlb-0                                   6m           25Mi\nsample-ha-argo-pam-0                                     5m           458Mi\nsample-ha-argo-rs-7d6888d9f8-lp65s                       2m           1008Mi\nsample-ha-argo-rs-7d6888d9f8-tjxh8                       2m           1135Mi\nsample-ha-argo-web-f646f75b8-htn8x                       4m           1224Mi\nsample-ha-argo-web-f646f75b8-nvvjf                       11m          1239Mi\nsample-ha-argo-webdav-d69549bd4-nz4wn                    2m           354Mi\nsample-ha-argo-webdav-d69549bd4-vrg2n                    3m           364Mi\nsample-ha-cmis-5fc96b8f89-cwd62                          2m           408Mi\nsample-ha-cmis-5fc96b8f89-q4nr4                          3m           442Mi\nsample-ha-database-0                                     2m           106Mi\nsample-ha-ilm-6b599bc694-5ht57                           2m           174Mi\nsample-ha-ilm-6b599bc694-ljkl4                           2m           193Mi\nsample-ha-mon-0                                          3m           355Mi\nsample-ha-nappl-0                                        3m           1278Mi\nsample-ha-nappl-1                                        4m           1295Mi\nsample-ha-nappljobs-0                                    6m           1765Mi\nsample-ha-nstla-0                                        4m           25Mi\nsample-ha-nstlb-0                                        4m           25Mi\nsample-ha-pam-0                                          2m           510Mi\nsample-ha-rs-7b5fc586f6-49qhp                            2m           951Mi\nsample-ha-rs-7b5fc586f6-nkjqb                            2m           1205Mi\nsample-ha-web-7bd6ffc96b-pwvcv                           3m           725Mi\nsample-ha-web-7bd6ffc96b-rktrh                           9m           776Mi\nsample-ha-webdav-9df789f8-2d2wn                          2m           365Mi\nsample-ha-webdav-9df789f8-psh5q                          2m           345Mi\n...\n```\n"}
+{"chapter": "Defaults", "level": 2, "text": "Check the file `default.yaml`. You can set default memory limits for a container. These defaults are applied if you do not specify any resources in your manifest.\n"}
+{"chapter": "Single-Instance-Mode", "level": 1, "text": "If you choose to separate tenants on your system not only by *nplus Instances* but also by *nplus Environments*, thus running each tenant in a separate Kubernetes *Namespace*, you do not need to create an *nplus Environment* first, but you can rather enable the *nplus Environment Components* within your instance:\n```yaml\ncomponents:\nsim:\ndav: true\nbackend: true\noperator: true\ntoolbox: true\n```\nSteps to run a SIM Instance:\n1. Create the namespace and the necessary secrets to access the repo, registry as well as the nscale license file\n```\nSIM_NAME=\"empty-sim\"\nkubectl create ns $SIM_NAME\nkubectl create secret docker-registry nscale-cr \\\n--namespace $SIM_NAME \\\n--docker-server=ceyoniq.azurecr.io \\\n--docker-username=$NSCALE_ACCOUNT \\\n--docker-password=$NSCALE_TOKEN\nkubectl create secret docker-registry nplus-cr \\\n--namespace $SIM_NAME \\\n--docker-server=cr.nplus.cloud \\\n--docker-username=$NPLUS_ACCOUNT \\\n--docker-password=$NPLUS_TOKEN\nkubectl create secret generic nscale-license \\\n--namespace $SIM_NAME \\\n--from-file=license.xml=$NSCALE_LICENSE\n```\n2. Deploy the Instance\n```\nhelm install \\\n--values lab.yaml \\\n--values single-instance-mode.yaml \\\n--namespace $SIM_NAME \\\n$SIM_NAME nplus/nplus-instance\n```\nIf you do not have any Application that requires assets such as scripts or apps, you are good to go with this.\nHowever, if your Application does require assets, the *problem* is to get them into your (not existing) environment before the Applications is trying to access them.\nThere are three possible solutions:\n1. You create an umbrella chart and have a job installing the assets into your Instance\n2. You pull / download assets from your git server or an asset server before the Application deployment\n3. You pull / download assets from your git server or an asset server before the Component deployment, including the Application\n**Solution 1** obiously involes some implementation on your end. That is not covered in this documentation.\n**Solution 2** can be achieved by defining a downloader in your application chart (see `empty-download.yaml`):\n```yaml\ncomponents:\napplication: true\napplication:\ndocAreas:\n- id: \"Sample\"\ndownload:\n- \"https://git.nplus.cloud/public/nplus/raw/branch/master/samples/assets/sample.sh\"\nrun:\n- \"/pool/downloads/sample.sh\"\n```\n**Solutions 3** should be used if you have any assets that need to be available **before** the nscale Components start, like snippets for the web client etc.\nYou can use the *Prepper* for that purpose. The *Prepper* prepares everything required for the Instance to work as intended. It is very much like the *Application*, except that it does not connect to any nscale component (as they do not yet run by the time the prepper executes). But just like the Application, the Prepper is able to download assets and run scripts.\nYou can add this to your deployment:\n```yaml\ncomponents:\nprepper: true\nprepper:\ndownload:\n- \"https://git.nplus.cloud/public/nplus/raw/branch/master/assets/sample.tar.gz\"\nrun:\n- \"/pool/downloads/sample/sample.sh\"\n```\n"}
+{"chapter": "Deploying with Argo", "level": 1, "text": ""}
+{"chapter": "the argo version of the instance", "level": 2, "text": "Deployin with argoCD is straight forward, as there is a ready-to-run instance chart version for argo, that takes **exactly** the same values as the *normal* chart:\n```bash\nhelm install \\\n--values samples/application/empty.yaml \\\n--values samples/environment/demo.yaml \\\nsample-empty-argo nplus/nplus-instance-argo\n```\n"}
+{"chapter": "Using Waves", "level": 2, "text": "The instance chart already comes with pre-defined waves. They are good to go with (can be modified though):\n```yaml\nnappl:\nmeta:\nwave: 15\n```\n**But**: You might be annoyed by ArgoCD, when some services do not come up preventing other services to not be started at all since ArgoCD operates in Waves, so later services might not be deployed at all if an early wave services fails.\nEspecially in DEV, this can become a testing problem.\nTo turn *off* Waves completely for a Stage, Environment or Instance, go\n```\nglobal:\nenvironment:\nutils:\ndisableWave: true\n```\n"}
+{"chapter": "Pinning Versions", "level": 1, "text": ""}
+{"chapter": "Old Version", "level": 2, "text": "If you like to test rolling updates and the updates to new minor versions, check out the *e90* sample:\nThis sample will install a version 9.0.1400 for you to test. Since the Cluster Node Discovery changed due to a new jGroups version in nscale, the chart will notice the old version and turn on the legacy discovery mechanism to allow the Pod to find its peers in Versions prior to 9.1.1200.\n```\nhelm install \\\n--values samples/empty.yaml \\\n--values samples/demo.yaml \\\n--values versions/9.0.1400.yaml \\\nsample-e90 nplus/nplus-instance\n```\n"}
+{"chapter": "New Version Sample", "level": 2, "text": "Some nscale Versions are License-Compatible, meaning that for example a Version 9.1 License File will also be able to run a nscale Version 9.0 Software. But that is not always the case.\nSo you might need to set individual licenses per instance:\n```\nkubectl create secret generic nscale-license-e10 \\\n--from-file=license.xml=license10.xml\n```\nCheck, if the license has been created:\n```\n"}
+{"chapter": "kubectl get secret | grep license", "level": 1, "text": "nscale-license          Opaque              1      7d22h\nnscale-license-e10      Opaque              1      17s\n```\nNow, we install the instance:\n```\nhelm upgrade -i \\\n--values samples/empty.yaml \\\n--values samples/demo.yaml \\\n--values versions/10.0.yaml \\\n--set global.license=nscale-license-e10 \\\nsample-e10 nplus/nplus-instance\n```\n"}
+{"chapter": "Security", "level": 1, "text": ""}
+{"chapter": "All the standards", "level": 2, "text": "There are several features that will enhance the security of your system:\n- all components are running rootless by default\n- all components drop all privileges\n- all components deny escalation\n- all components have read only file systems\n- Access is restricted by NetworkPolicies\n"}
+{"chapter": "Additional: The backend Protocol", "level": 2, "text": "Additionally, you can increase security by encrypting communication in the backend. Depending on your network driver, this might already been done automatically beween the Kubernetes Nodes. But you can double that even within a single node by switching the backend Protocol to https:\n```yaml\nglobal:\nnappl:\nport: 8443\nssl: true\n"}
+{"chapter": "Web and PAM do not speak https by default yet, CRs have been filed.", "level": 1, "text": "nappl:\ningress:\nbackendProtocol: https\ncmis:\ningress:\nbackendProtocol: https\nilm:\ningress:\nbackendProtocol: https\nwebdav:\ningress:\nbackendProtocol: https\nrs:\ningress:\nbackendProtocol: https\nmon:\ningress:\nbackendProtocol: https\nadministrator:\ningress:\nbackendProtocol: https\n```\nThis will turn every communication to https, **but** leave the unencrypted ports (http) **open** for inter-pod communication.\n"}
+{"chapter": "Zero Trust Mode", "level": 2, "text": "This will basically do the same as above, **but** also turn **off** any unencrypted port (like http) and also implement NetworkPolicies to drop unencrypted packages.\nThis will also affect the way how *probes* are checking the pods health: *nplus* will switch them to use https instead, so even the very internal Healtch Check infrastructure will be encrypted in *zero trust mode*:\n```yaml\ncomponents:\npam: false  #TODO: ITSMSD-8771: PAM does not yet support https backend.\nglobal:\nsecurity:\nzeroTrust: true\nnappl:\nport: 8443\nssl: true\n```\n"}
+{"chapter": "(virtual-) Remote Management Server", "level": 1, "text": "The *nplus RMS* creates a virtual IP Address in your subnet. On this IP, you will find an *nscale Remote Management Service* and a Layer 4 Proxy, forwarding the ports of the components to the\nbelonging pods.\nThe result is, that under this VIP, it looks as if there is a real server with a bunch of *nscale* components installed. So you can use the desktop admin client to connect to it and configure it. Including offline configuration.\nThe offline configuration writes settings to the configuration files of the components. These files are injected into the Pods by *nplus* making the legacy magic work again.\nAlso, Shotdown, Startup and Restart buttons in the Admin client will work, as that will by translated to Kubernetes commands by *nplus*\nAnyways, there are some restrictions:\n- In a HA scenario, you need multiple virtual server, as nscale does not allow some components to deploy more than one instance per server (like nstl) and they would then also block the default ports. So better to have more RMS\n- Log Files are not written, so the Admin cannot grab them. So no log file viewing in Admin\n> Please notice that this is a BETA Feature not released for Production use.\nThis is a sample of RMS in a HA environment with two virtual servers:\n```yaml\ncomponents:\nrmsa: true\nrmsb: true\nrmsa:\ningress:\ndomain: \"server1.{{ .instance.group | default .Release.Name }}.lab.nplus.cloud\"\ncomps:\nnappl:\nenabled: true\nrestartReplicas: 2\nnstl:\nenabled: true\nname: nstla\nrestartReplicas: 1\nhost: \"{{ .component.prefix }}nstla.{{ .Release.Namespace }}.svc.cluster.local\"\nrs:\nenabled: true\nrestartReplicas: 2\nweb:\nenabled: true\nrestartReplicas: 2\nrmsb:\ningress:\ndomain: \"server2.{{ .instance.group | default .Release.Name }}.lab.nplus.cloud\"\ncomps:\nnappl:\nenabled: true\nname: nappljobs\nrestartReplicas: 1\nreplicaSetType: StatefulSet\nhost: \"{{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local\"\nnstl:\nname: nstlb\nenabled: true\nrestartReplicas: 1\nhost: \"{{ .component.prefix }}nstlb.{{ .Release.Namespace }}.svc.cluster.local\"\n```\n"}
+{"chapter": "Using Object Stores", "level": 1, "text": "Blobstores aka Objectstores have a REST Interface that you can upload your Payload to and receive an ID for it. They are normally structured into *Buckets* or *Containers* to privide\nsome sort of pooling payload within the store.\nThe *nscale Server Storage Layer* supports multiple brands of objectstores, the most popular being Amazon S3 and Microsoft Azure Blobstore.\nIn order to use them, you need to\n- get an account for the store\n- configure the *nstl* with the url, credentials etc.\n- Add firewall rules to access to store\nHave a look at the sample files\n- s3-env.yaml\nfor Amazon S3 compatible storage, and\n- azureblob.yaml\nfor Azure Blobstore\nFor S3 compatible storage, there are multiple S3 flavours available.\n"}
+{"chapter": "Custom Environment Variables", "level": 1, "text": "There are multiple ways of how to set custom environment variables in addition to the named values, you set in helm:\n"}
+{"chapter": "Using `env`", "level": 2, "text": "Please have a look at `s3-env.yaml` to see how custom environment variables can be injected into a component:\n```\nnstl:\nenv:\n# Archivtyp\nNSTL_ARCHIVETYPE_900_NAME: \"S3\"\nNSTL_ARCHIVETYPE_900_ID: \"900\"\nNSTL_ARCHIVETYPE_900_LOCALMIGRATION: \"0\"\nNSTL_ARCHIVETYPE_900_LOCALMIGRATIONTYPE: \"NONE\"\nNSTL_ARCHIVETYPE_900_S3MIGRATION: \"1\"\n```\nThis will set the environment variables in the storage layer to add an archive type with id 900.\n"}
+{"chapter": "Using `envMap` and `envSecret`", "level": 2, "text": "Alternatively to the standard `env`setting, you can also use configmaps and secrets for additional environment variables.\nThe file `s3-envres.yaml` creates a configmap and a secret with the same variables as used in the `s3-env.yaml` sample. `s3-envfrom.yaml` shows how to import them.\nPlease be aware, that data in secrets need to be base64 encoded:\n```\necho \"xxx\" | base64\n```\nSo in order to use the envFrom mechanism,\n- prepare the resources (as in `s3-envres.yaml`)\n- upload the resources to your cluster\n```\nkubectl apply -f s3-envres.yaml\n```\n- add it to your configuration\n```\nnstl:\n# These resources are set in the s3-envres.yaml sample file\n# you can set single values (envMap or envSecret) or lists (envMaps or envSecrets)\nenvMaps:\n- env-sample-archivetype\n- env-sample-device\nenvSecret: env-sample-device-secret\n```\n"}
+{"chapter": "Specifics of the Sharepoint Connector", "level": 1, "text": "Normally, you will have different configurations if you want multiple Sharepoint Connectors. This makes the *nsp* somewhat special:\n"}
+{"chapter": "Multi Instance HA Sharepoint Connector", "level": 2, "text": "This sample shows how to setup a sharepoint connector with multiple instances having **different** configurations for archival, but with **High Availability** on the retrieval side.\nSharePoint is one of the few components for which is is quite common to have multiple instances instead of replicas. Replicas would include, that the configuration for all pods is identical. However, you might want to have multiple configurations as you also have multiple sharepoint sites you want to archive.\nRunning multiple instances with ingress enabled leads to the question, what the context path is for each instance. It cannot be the same as the load balancer would not be able to distinguish between them and thus refuses to add the configuration object - leading in a deadlock situation.\nSo *nplus* defined different context paths if you have multiple instances:\n- sharepointa on `/nscale_spca`\n- sharepointb on `/nscale_spcb`\n- sharepointc on `/nscale_spcc`\n- sharepointd on `/nscale_spcd`\nIf you only run one instance, it defaults to `/nscale_spc`.\n"}
+{"chapter": "HA on retrieval", "level": 2, "text": "Once archived, you might want to use all instances for retrieval, since they share a common retrieval configuration (same nappl, ...). So in order to gain High Availability even across multiple instances, there are two options:\n1. You turn off the services and ingresses on any sharepoint instance but sharepointa. Then you switch sharepointa's service selector to *type mode*, selecting all pods with type `sharepoint` instead of all pods of component `sharepointa`. Then you can access this one service to reach them all.\n2. You can turn on the *clusterService*, which is an additional service that selects all `sharepoint` type pods and then adds an extra ingress on this service with the default context path `nscale_spc`\nHowever, in both scenarios, beware that the sharepoint connector can only service one context path at a time, so you will need to change the context path accordingly.\n"}
+{"chapter": "Sample for solution 1", "level": 2, "text": "On the instance, define the following:\n```\ncomponents:\n# -- First, we switch the default SharePoint OFF\nsharepoint: false\n# -- Then we enable two sharepoint instances to be used with different configurations\nsharepointa: true\nsharepointb: true\nsharepointa:\nservice:\n# -- Switching the service to \"type\" makes sure we select not only the component pods (in this case all replicas of sharepointa)\n# but rather **any** pod of type sharepoint.\nselector: \"type\"\ningress:\n# -- The default contextPath for sharepointa is `nscale_spca` to make sure we have distinguishable paths for all sharepoint instances.\n# however, in this case we re-use the service as cluster service and die ingress as cluster ingress, so we switch to the general\n# contextPath, as if it was a single component deployment\ncontextPath: \"/nscale_spc\"\nsharepointb:\nservice:\n# -- The other SP Instance does not need a service any more, as it is selected by the cluster service above. So we switch off the component\n# service which also switches off the ingress as it would not have a backing service any more\nenabled: false\n# -- The default contextPath for sharepointb is `nscale_spcb` to make sure we have distinguishable paths for all sharepoint instances.\n# however, in this case we re-use the service as cluster service and die ingress as cluster ingress, so we switch to the general\n# contextPath, as if it was a single component deployment\ncontextPath: \"/nscale_spc\"\n```\n"}
+{"chapter": "Sample for Solution 2", "level": 2, "text": "On the instance, define the following:\n```\ncomponents:\n# -- First, we switch the default SharePoint OFF\nsharepoint: false\n# -- Then we enable two sharepoint instances to be used with different configurations\nsharepointa: true\nsharepointb: true\nsharepointa:\nclusterService:\n# -- This enabled the cluster service\nenabled: true\n# -- the cluster Ingress needs to know the context path it should react on.\ncontextPath: \"/nscale_spc\"\ningress:\n# -- we turn off the original ingress as the common context path would block the deployment\nenabled: false\n# -- The default contextPath for sharepointa is `nscale_spca` to make sure we have distinguishable paths for all sharepoint instances.\n# however, in this case we re-use the service as cluster service and die ingress as cluster ingress, so we switch to the general\n# contextPath, as if it was a single component deployment\ncontextPath: \"/nscale_spc\"\nsharepointb:\nclusterService:\n# -- on the second SharePoint Instance, we **disable** the cluster service, as it is already created by sharepointa.\nenabled: false\n# -- however, we need to set the context path, as this tells the networkPolicy to open up for ingress even though we switch die Ingress off in the\n# next step\ncontextPath: \"/nscale_spc\"\ningress:\n# -- we turn off the original ingress as the common context path would block the deployment\nenabled: false\n# -- The default contextPath for sharepointb is `nscale_spcb` to make sure we have distinguishable paths for all sharepoint instances.\n# however, in this case we re-use the service as cluster service and die ingress as cluster ingress, so we switch to the general\n# contextPath, as if it was a single component deployment\ncontextPath: \"/nscale_spc\"\n```\n"}
+{"chapter": "Static Volumes", "level": 1, "text": ""}
+{"chapter": "Assigning PVs", "level": 2, "text": "For security reasons, you might want to use a storage class that does not perform automatic provisioning of PVs.\nIn that case, you want to reference a pre-created volume in the PVC.\nIn nplus, you can do so by setting the volumeName in the values.\nPlease review `values.yaml` as an example:\n```yaml\ndatabase:\nmounts:\ndata:\nvolumeName: \"pv-{{ .component.fullName }}-data\"\nnstl:\nmounts:\ndata:\nvolumeName: \"pv-{{ .component.fullName }}-data\"\n```\nYou can also set the environment config volume. Please refer to the environment documentation for that.\n```\nhelm install \\\n--values samples/environment/demo.yaml \\\n--values samples/static/values.yaml\nsample-static nplus/nplus-instance\n```\n"}
+{"chapter": "Creating PVs", "level": 2, "text": "https://github.com/ceph/ceph-csi/blob/devel/docs/static-pvc.md\n"}
+{"chapter": "Data Disk:", "level": 3, "text": "1. Create a pool on your cep cluster\n```\nceph osd pool create k-lab 64 64\n```\n2. Create a block device pool\n```\nrbd pool init k-lab\n```\n3. Create an image\n```\nrbd create -s 50G k-lab/pv-sample-static-database-data\nrbd create -s 50G k-lab/pv-sample-static-nstl-data\nrbd ls k-lab | grep pv-sample-static-\n```\nResize:\n```\nrbd resize --size 50G k-lab/pv-no-provisioner-database-data --allow-shrink\n```\n"}
+{"chapter": "File Share:", "level": 3, "text": "1. Create a Subvolume (FS)\n```\nceph fs subvolume create cephfs pv-no-provisioner-rs-file --size 53687091200\n```\n2. Get the path of the subvolume\n```\nceph fs subvolume getpath  cephfs pv-no-provisioner-rs-file\n```\n"}
+{"chapter": "Troubleshooting", "level": 3, "text": "```\nkubectl describe pv/pv-no-provisioner-rs-file pvc/no-provisioner-rs-file\nkubectl get volumeattachment\n```\n"}
+{"chapter": "PV Manifests", "level": 3, "text": "```yaml\napiVersion: v1\nkind: PersistentVolume\nmetadata:\nname: pv-no-provisioner-database-data\nspec:\naccessModes:\n- ReadWriteOnce\ncapacity:\nstorage: 50Gi\ncsi:\ndriver: rook-ceph.rbd.csi.ceph.com\nfsType: ext4\nnodeStageSecretRef:\n# node stage secret name\nname: rook-csi-rbd-node\n# node stage secret namespace where above secret is created\nnamespace: rook-ceph-external\nvolumeAttributes:\n# Required options from storageclass parameters need to be added in volumeAttributes\nclusterID: rook-ceph-external\npool: k-lab\nstaticVolume: \"true\"\nimageFeatures: layering\n#mounter: rbd-nbd\n# volumeHandle should be same as rbd image name\nvolumeHandle: pv-no-provisioner-database-data\npersistentVolumeReclaimPolicy: Retain\n# The volumeMode can be either `Filesystem` or `Block` if you are creating Filesystem PVC it should be `Filesystem`, if you are creating Block PV you need to change it to `Block`\nvolumeMode: Filesystem\nstorageClassName: ceph-rbd\n---\napiVersion: v1\nkind: PersistentVolume\nmetadata:\nname: pv-no-provisioner-nstl-data\nspec:\naccessModes:\n- ReadWriteOnce\ncapacity:\nstorage: 50Gi\ncsi:\ndriver: rook-ceph.cephfs.csi.ceph.com\nfsType: ext4\nnodeStageSecretRef:\n# node stage secret name\nname: rook-csi-rbd-node\n# node stage secret namespace where above secret is created\nnamespace: rook-ceph-external\nvolumeAttributes:\n# Required options from storageclass parameters need to be added in volumeAttributes\nclusterID: rook-ceph-external\npool: k-lab\nstaticVolume: \"true\"\nimageFeatures: layering\n#mounter: rbd-nbd\n# volumeHandle should be same as rbd image name\nvolumeHandle: pv-no-provisioner-nstl-data\npersistentVolumeReclaimPolicy: Retain\n# The volumeMode can be either `Filesystem` or `Block` if you are creating Filesystem PVC it should be `Filesystem`, if you are creating Block PV you need to change it to `Block`\nvolumeMode: Filesystem\nstorageClassName: ceph-rbd\n---\napiVersion: v1\nkind: PersistentVolume\nmetadata:\nname: pv-no-provisioner-rs-file\nspec:\naccessModes:\n- ReadWriteMany\ncapacity:\nstorage: 50Gi\ncsi:\ndriver: cephfs.csi.ceph.com\nnodeStageSecretRef:\nname: rook-csi-cephfs-secret\n#rook-csi-cephfs-node\nnamespace: rook-ceph-external\nvolumeAttributes:\n# Required options from storageclass parameters need to be added in volumeAttributes\nclusterID: rook-ceph-external\nfsName: cephfs\npool: cephfs_data\nstaticVolume: \"true\"\n# rootPath kriegt man per ceph fs subvolume getpath  cephfs pv-no-provisioner-rs-file\nrootPath: \"/volumes/_nogroup/pv-no-provisioner-rs-file/3016f512-bc19-4bfb-8eb2-5118430fbbe5\"\n#mounter: rbd-nbd\n# volumeHandle should be same as rbd image name\nvolumeHandle: pv-no-provisioner-rs-file\npersistentVolumeReclaimPolicy: Retain\n# The volumeMode can be either `Filesystem` or `Block` if you are creating Filesystem PVC it should be `Filesystem`, if you are creating Block PV you need to change it to `Block`\nvolumeMode: Filesystem\nstorageClassName: cephfs\n```\n"}
diff --git a/ai/jsonl/faq.jsonl b/ai/jsonl/faq.jsonl
new file mode 100644
index 0000000..2a9ea12
--- /dev/null
+++ b/ai/jsonl/faq.jsonl
@@ -0,0 +1,29 @@
+{"question": "How do I add my custom Generic Base App (GBA) to the deployment?", "answer": "You can use the application chart to add your GBAs to a deployment. Please follow the instructions\nin the [chart README](../charts/application/README.md)."}
+{"question": "I do not find any of my custom objects (roles, classes, ...) from my GBA in the system. Is there an install log file that I can check?", "answer": "Yes. You can either check the log of the application job with\n```\nkubectl logs -l nplus/instance=sbs,nplus/component=application\n```\nor you can check the log at `/conf/<instance>/application/10init.log` from the environment toolbox.\nPlease check out the [chart README](../charts/application/README.md) for more information.\n> Please note, that the job/pod is automatically removed shortly after app installation, so the `kubectl logs` command might not find the ressource any more."}
+{"question": "Network Policies", "answer": "Kubernetes CNI supports the use of `NetworkPolicy` resources. Every resource, that has a NetworkPolicy attached is monitored by a compatible CNI driver such as Calico oder Cilium and Network Filter Rules are implemented.\nBy this means, one pod can only communicate with other pods, if a network rule has explicely been applied.\nnplus supports NetworkPolicies by the following control structures:\nsecurity.cni. (on component, instance or environment level)\n- defaultIngressPolicy\n    can be set to *deny*, *allow* or none.\n    *deny* will drop all undefined inbound packages,\n    *allow* will forward all undefined inbound packages\n    If not defined, the Policy will not be created.\n- defaultEgressPolicy\n    can be set to *deny*, *allow* or none.\n    *deny* will drop all undefined outbound packages,\n    *allow* will forward all undefined outbound packages\n    If not defined, the Policy will not be created.\n- createNetworkPolicy\n    toggles the policy creation in general\nFor larger projects, it is likely to have a *Central Services* Instance that hold e.g. the *Administrator* and the *Monitoring Console*. If these services are in the same namespace and within the same instance, nothing need to be done (default).\nHowever, if you use *Central Services* you can define the Namespace and the Instance of these services in order to have NetworkPolicies created for inter-namespace and inter-instance traffic.\n- administratorNamespace\n- administratorInstance\n- monitoringNamespace\n- monitoringInstance\n- pamNamespace\n- pamInstance\n> If you use a centralized *Storage Layer* and *Rendition Server*, you will have to apply extra Policies to allow access. Please remember to write ingress and egress rules.\nExample:\n```\nglobal:\n  environment:\n    security:\n      cni:\n        defaultIngressPolicy: deny\n        defaultEgressPolicy: deny\n        createNetworkPolicy: true\n```"}
+{"question": "How can I use snc in NAPPL to access my SAP System?", "answer": "To use *snc* in NAPPL, you need to\n1. Enable it in NAPPL (`nappl.snc.enabled: true`)\n2. Add the IP Range of your SAP Systems to allow egress access (`nappl.snc.sapIpRange: \"0.0.0.0/0\"`)\n3. Copy the *snc* files to the nplus environment (`kubectl cp snc nplus-toolbox-0:/conf/pool`)\nPlease find more information in the [nappl chart README](../charts/nappl/README.md)"}
+{"question": "How can I use extra fonts for rendition or OCR?", "answer": "Extra fonts, like the *mscorefonts* can be installed by copying them into the *nplus environment*. The fonts are then automatically applied to all *rendition Server* and *Application Layer* components within all *nplus Instances* within this environment.\nTo copy fonts to the pool, use\n```\nkubectl cp test/fonts nplus-toolbox-0:/conf/pool\n```\nThis copies the local *fonts* directory to the environment pool.\nThe target is `pool/fonts`, where all extra fonts must reside.\nThis is then picked up by the components."}
+{"question": "How can I completely remove any trace of *nplus* from my cluster?", "answer": "1. Remove all *nplus Instances* from your *nplus Environment*:\nIf you installed with helm:\n```\nhelm uninstall myInstance\n```\nIf you installed using Argo:\n```\nhelm install myInstance-argo\n```\nor whatever the name of your instance is.\nIf you installed by kubectl:\n```\nkubectl delefe -f myInstance.yaml\n````\nDo this for all instances.\n2. Remove the *nplus Environment* from the Kubernetes Namespace\nif installed by helm:\n```\nhelm uninstall <name>\n```\nwhere *name* is the name you used when installing\n3. Remove the *nplus Cluster* from the Kubernetes Cluster\nif installed by helm:\n```\nhelm uninstall <name>\n```\nwhere *name* is the name you used when installing"}
+{"question": "I would like to connect to the environment dav server to access the config files", "answer": "You can access the *nplus Environment conf dav server* either\n- through an ingress, if you enable it. But you might want to keep it disabled for security reasons. Instead you can access it\n- via a port forwarding from your local machine, in case you have kubectl access to the cluster:\n```\nkubectl port-forward pods/nplus-davserver-0 8080:8080\n```\nThen, you can connect to the server via http://localhost:8080/dav"}
+{"question": "How can I manually delete all Resources belonging to a specific instance?", "answer": "To delete everything belonging to a specific instance, you can use:\n```\nkubectl delete $(kubectl get svc,sts,deployment,cm,secret,networkpolicy,ing,pvc,certificate,nscale -l nplus/instance=<instance> -o name)\n```"}
+{"question": "I changed the image tag of *nscale Web*, but when I apply, the component stays healthy", "answer": "Even though it might seem *nscale Web* would not restart, it actually does.\n*nscale Web* is configured as a *Rolling Update DeamonSet*, so it first creates a new Pod and waits till that is ready. Then it stops the old one.\nDuring the update cycle, the services stays healthy.\nNotice, that the *Application* job (if defined) runs as well. That is, because updating the Web component might require new Snippets etc. to be installed,\nto *nplus* is giving the *Application* the chance to do so."}
+{"question": "Can I check out a nappl image?", "answer": "Yes, you can:\n```sh\ndocker run --rm -it ceyoniq.azurecr.io/release/nscale/application-layer:ubi.9.2.1200.2024052713 /bin/bash\n```"}
+{"question": "Can I bash into my nappljobs?", "answer": "Indeed:\n```sh\nkubectl exec --stdin --tty demo-ha-nappljobs-0 -- /bin/bash\n```"}
+{"question": "I keep getting errors, that *chmod* is not allowed on the conf file system", "answer": "This might be because you might be using a CIFS / smb shared file system (like Microsoft Azure File).\nYou can switch off all internal chmod commands by setting `.Values.global.environment.storage.conf.cifs` to `true`."}
+{"question": "We use multiple ingress controllers in different namespaces. How do we set that?", "answer": "You can set the ingress class per enviroment, per instance or per component.\nComponent bein the highest priority.\nAdditionally, you might want to set the namespace of your controller to allow ingress traffic from that namespace to the pods. Since you probably have multiple namespaces, this is a comma separated list:\n```\n# Set Ingress namespace per component\ningress:\n  namespace: \"nginx-ingress\"\n```\nor\n```\n# Set Ingress namespaces for all instances in an environment\nglobal:\n  environment:\n    ingress:\n      namespace: \"ingress, kube-system, external-ingress, internal-ingress, backup-ingress\"\n```"}
+{"question": "How do I know which tags exist in the registry?", "answer": "You can use Skopeo:\n```\nskopeo list-tags  docker://ceyoniq.azurecr.io/release/nscale/application-layer\n```\nThis lists all nappl tags in the registry"}
+{"question": "We use a forward proxy in our DMZ and have problems with OAuth (or others)", "answer": "If you use a forward proxy, such as in a DMZ Scenario, you will probably need to configure your cluster Load Balancer so it forwards the real IP adress of your clients.\nIn nginx, this is done by the setting `use-forwarded-headers` which needs to be put into the clusterwide config (this is a global option):\n```\nkind: ConfigMap\napiVersion: v1\nmetadata:\n  name: nginx-load-balancer-microk8s-conf\n  namespace: ingress\ndata:\n  use-forwarded-headers: \"true\"\n  proxy-real-ip-cidr: \"<Your Reverse Proxy IP>\"\n```\nApply this config map to your nginx LB namespace setting the IP Adress CIDR of your DMZ Reverse Proxy.\nIn the DMZ nginx configuration, make sure you submit all necessary information:\n```\nserver {\n    server_name                 demo.nscale.cloud;\n    client_max_body_size        10G;\n    proxy_set_header            X-Forwarded-For $remote_addr;\n    proxy_set_header            X-Forwarded-Host $host;\n    proxy_set_header            X-Forwarded-Proto $scheme;\n    if ( $is_bot ) { return 410; }\n    location = / { return 301 \"/nscale_web\"; }\n    location = /me { return 301 \"/auth/realms/cloud/account\"; }\n    location /robots.txt { return 200 \"User-agent: *\\nDisallow: /\"; }\n    location /nscale_web                                { proxy_pass https://dmz.lan; }\n    location ~ ^/(auth/realm|auth/login|auth/resources) { proxy_pass https://centralservices.lan; }\n    location /nscalealinst1                             { proxy_pass https://dms.lan; }\n    listen 443 ssl;\n    ssl_certificate            fullchain.pem;\n    ssl_certificate_key        privkey.pem;\n}\n```"}
+{"question": "How yan I set Ressources (CPU / RAM) for the components?", "answer": "You can set the ressources in the Values:\n```yaml\nresources:\n  requests:\n    cpu: \"100m\"         # Minimum 1/10 CPU\n    memory: \"500Mi\"     # Minimum 500 MB\n  limits:\n    cpu: \"2000m\"        # Maximum 2 Cores\n    memory: \"4096Mi\"    # Maximum 4 GB. Java will see this as total.\n```\nIf you want to set Java Memory Options:\n```yaml\njavaOpts:\n  javaMinMem: \"1024m\"\n  javaMaxMem: \"2048m\"\n```"}
+{"question": "How can I bash into nappl?", "answer": "This is an example of how to bash into a nappl, in this case empty-nappl-0:\n```\nkubectl exec --stdin --tty empty-nappl-0 -- /bin/bash\n```"}
+{"question": "How can I set the timezone?", "answer": "You can set the timezone per component, instance and/or environment, using the `timezone` value. Please refer to the\ncomponent README.md for more information."}
+{"question": "How can I use priorityClasses for the components?", "answer": "You can use an existing priorityClass by setting `priority.className: <your class>` on the component, instance or environment.\nIf you want to have the class created for you, you can set `priority.createClass: true`.\nYou can also set the desired value.\nExample:\n```yaml\npriority:\n  className: '{{ .component.fullName }}'\n  createClass: true\n  value: \"1000000\"\n```\n> If you omit the quotes for value, you will end up having a float64 like `1e+06` in your values, which will cause problems.\nTo forcefully switch off any previously set priority for a specific instance, you can override:\n```yaml\nglobal:\n  override:\n    priority:\n```\nThe **default** is to have no priorityClass at all."}
+{"question": "How can I enable and access the Web Administrator?", "answer": "To enable the nscale Administrator (Web, aka *RapAdmin*), you have to first enable the *administrator* chart in your instance:\n```yaml\ncomponents.administrator: true\n```\nBy default, the Administrator will use the standard Application Layer for login. You can change that by setting\n```yaml\nadministrator:\n  nappl:\n    host: '{{ include \"nplus.prefix\" . }}nappljobs.{{ .Release.Namespace }}'\n  waitFor:\n    - '-service {{ include \"nplus.prefix\" . }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:{{ .Values.global.nappl.port }} -timeout 600'\n```\nThis is an example, where we use multiple Application Layer and one designated Application Layer for Jobs. And we use this `nappljobs` for administration as well. So the above configuration changes the default and lets the admin client access nappljobs.\nIf you run the Administrator in another instance (Central Services or something alike), you can also cross namespaces and/or instances here to access multiple tenants if desired. But in that case you might need to add individual *networkPolicies* to allow access.\nOnce the Admin Client is running, you can reach it at `https://<Your Domain>/rapadm`."}
+{"question": "I want to use the same domain for my environment and my instance, so the certificates are created twice", "answer": "First of all, are you sure you want the same domain? Because the environment ingress is used by admins to access the config by dav or the monitoring data from the operator. You normally would not want that to use the same domain / ingress as the users of your services.\nHowever, if you decide to use the same domain, you can easily switch off certificate generation: Certificates are either generated by an issuer like cert-manager or are self-signed and generated by helm.\n- if `.this.ingress.issuer` is set, the chart requests this issuer to generate a tls secret with the name `.this.ingress.secret`\n  by creating a certificate resource with the name of the domain `.this.ingress.domain`\n- else, so no issuer is set, the chart checks wether the flag `.this.ingress.createSelfSignedCertificate` is set to `true` and\n  generates a tls secret with the name `.this.ingress.secret`\n- else, so neither issuer nor createSelfSignedCertificate are set, the charts will not generate anything\nAfter the instance or environment ran through the generation process, the components use the name of the tls\nsecret `.this.ingress.secret` for their ingresses, in case `.this.ingress.enabled` is `true`.\nSo to cut a long story short:\n1. You better not have the same domain for end users and admins. Please re-consider and try something like\n    - `admin.my-domain.internal` for admin access and\n    - `my-domain.cloud` for public access\n2. If you do want the same domain, you need to switch off the generation process in either the instance or the environment.\n   You can still use the same secret. As the environment is deployed before the instance, it might be a good idea to switch off the instance:\n   ```yaml\n   global:\n    ingress:\n      issuer: null\n      createSelfSignedCertificate: false\n   ```"}
+{"question": "How can I access my services with a browser?", "answer": "Well, that of course depends on\n- which services you enabled\n- if these services gain access through a web interface\n- this access (ingress) is enabled.\nYou can check like this:\n```bash\nkubectl get ingress -l nplus/instance=<your instance>\n```\nExample using the *demo-ha* example:\n```bash\n% kubectl get ingress -l nplus/instance=demo-ha\nNAME                    CLASS    HOSTS                     ADDRESS     PORTS     AGE\ndemo-ha-administrator   public   demo-ha.lab.nplus.cloud   127.0.0.1   80, 443   10h\ndemo-ha-cmis            public   demo-ha.lab.nplus.cloud   127.0.0.1   80, 443   10h\ndemo-ha-ilm             public   demo-ha.lab.nplus.cloud   127.0.0.1   80, 443   10h\ndemo-ha-mon             public   demo-ha.lab.nplus.cloud   127.0.0.1   80, 443   10h\ndemo-ha-nappl           public   demo-ha.lab.nplus.cloud   127.0.0.1   80, 443   10h\ndemo-ha-pam             public   demo-ha.lab.nplus.cloud   127.0.0.1   80, 443   10h\ndemo-ha-web             public   demo-ha.lab.nplus.cloud   127.0.0.1   80, 443   10h\ndemo-ha-webdav          public   demo-ha.lab.nplus.cloud   127.0.0.1   80, 443   10h\n```\nThen, you can drill into an ingress, to get the paths:\n```bash\nkubectl describe ingress <ingress>\n```\nYou can also get a list of all hosts + paths:\n```bash\n% kubectl get ingress -l nplus/instance=demo-ha -o json 2> /dev/null| jq -r '.items[] | .spec.rules[] | .host as $host | .http.paths[] | ( $host + .path)' | sort | grep -v ^/\ndemo-ha.lab.nplus.cloud/cmis\ndemo-ha.lab.nplus.cloud/dav\ndemo-ha.lab.nplus.cloud/engine.properties\ndemo-ha.lab.nplus.cloud/index.html\ndemo-ha.lab.nplus.cloud/modeler\ndemo-ha.lab.nplus.cloud/nscale_web\ndemo-ha.lab.nplus.cloud/nscalealinst1\ndemo-ha.lab.nplus.cloud/nscalealinst1/webb/configuration\ndemo-ha.lab.nplus.cloud/nscalealinst1/webc/configuration\ndemo-ha.lab.nplus.cloud/nscalemc\ndemo-ha.lab.nplus.cloud/rapadm\ndemo-ha.lab.nplus.cloud/res\ndemo-ha.lab.nplus.cloud/sap_ilm\n```"}
+{"question": "I would like to disable the ingress on the operator, but access it through a NodePort Service", "answer": "Sure. Just disable the ingress first on your environment deployment:\n```yaml\noperator:\n  ingress:\n    enabled: false\n```\nThen add a NodePort Service to access it:\n```bash\ncat << EOF | kubectl apply -f -\napiVersion: v1\nkind: Service\nmetadata:\n  name: nplus-operator-nodeport-access\nspec:\n  type: NodePort\n  selector:\n    nplus/component: operator\n  ports:\n    - port: 8080\n      targetPort: 8080\n      nodePort: 31976\nEOF\n```\nAccess it:\n- `http://<Your Cluster Node IP>:31976/monitoring`\n- `https://<Your Cluster Node IP>:31977/monitoring`\nhttps://10.17.1.31:31977/monitoring/index.html?page=overview"}
+{"question": "During Desaster Recovery tests we noticed that we cannot change the Document ID in runtime. What should we do?", "answer": "You can switch the component (in this case the Storage Layer as you mention the Document ID, but this method work for any component) into *Maintenance Mode*. Maintenance Mode will\n- start pods without starting the service, providing the possibility to gain access to the container to perform recovery tasks that need to be done offline. In order to do this:\n  - All *waitFor* definitions are ignored\n  - All *Health Checks* are ignored\n  - The container starts in idle\n  - Application Jobs are disabled\nYou can put a component, an instance or the whole environment into maintenance.\n```yaml\nutils:\n  maintenance: true\n```\nor global for the instance:\n```yaml\nglobal:\n  utils:\n    maintenance: true\n```"}
+{"question": "Why can't I specify pullSecrets on the waitImage?", "answer": "pullSecrets are defined at pod level, not at container level. WaitFor is a container, so it doesn't have its own pullSecrets but rather takes the pod ones."}
+{"question": "We do not want to use argoCD Waves, can we switch it off?", "answer": "Yes, just add the following to the `values.yaml` to globally turn off the argoCD Wave feature:\n```yaml\nglobal:\n  utils:\n    disableWave: true\n```\nPlease also see the *nowaves* example"}
+{"question": "Out Instances became pretty large with lots of components and multiple team members working on parts of it. Can we somehow slices it into smaller chunks?", "answer": "Yes, you can. Simply create multiple Instances with the components you like and then join them all together using a common `.instance.group` tag.\nThis will open the firewall (Network Policies) to allow traffic within the group / between multiple Instances.\nPlease see the *group* example for details"}
+{"question": "I get frequent DV/DA HID check failures in nstl in my dev Environment", "answer": "In the lab / dev environment, you probably quite often throw away the data disk while keeping the conf folder. The default for the DA_HID.DAT is the conf folder, so they do not match any more. You can easily switch the check off:\n```yaml\nnstl:\n  checkHighestDocId: \"0\"\nnstla:\n  checkHighestDocId: \"0\"\nnstlb:\n  checkHighestDocId: \"0\"\n```\nif you do this in the environment, you have globally switched all nstl da checks off."}
+{"question": "We use the postgres DB for DEV and would like to get a dump. How can we do that?", "answer": "You can call pg_dump from the command line. Make sure you have the right password and pod.\n```\nkubectl exec --stdin --tty sample-empty-database-0 -- env PGPASSWORD=\"postgres\" pg_dump -U postgres -w nscale > test.dump\n```"}
diff --git a/ai/jsonl/history.jsonl b/ai/jsonl/history.jsonl
new file mode 100644
index 0000000..7bfaa49
--- /dev/null
+++ b/ai/jsonl/history.jsonl
@@ -0,0 +1,23 @@
+{"chapter": "Version History", "level": 1, "text": ""}
+{"chapter": "November 2024, beta 160", "level": 2, "text": "- Added a startup probe for nstl\n"}
+{"chapter": "November 2024, beta 159", "level": 2, "text": "- Added .instance.stage to identify a stage\n"}
+{"chapter": "November 2024, beta 158", "level": 2, "text": "- Added service.name for Open Telemetry\n"}
+{"chapter": "Oktober 2024, beta 157", "level": 2, "text": "- Latest ERP-Proxy Version by Ceyoniq. This also has been **renamed** to **erpproxy** to match the **eprcmis** connector chart naming\n- First BETA of ERP-CMIS Connector in directory **erpcmis**\n- Added the possibility to add Annotations to Payloads, for the use with OpenTelemetry\nAlso see [here](https://opentelemetry.io/docs/kubernetes/operator/automatic/)\n- Also added hard coded openTelemetry support for convenience\n- Fixed a bug where the prepper chart waited for post sync in argo deployments\n"}
+{"chapter": "Oktober 2024, beta 156", "level": 2, "text": "- nscale ERP Proxy Chart now available. There is still a bug in this first image by Ceyoniq, so the chart will not bring up a running\nsystem yet. But the Values are in, so you can start setting up the instances.\n"}
+{"chapter": "Oktober 2024, beta 155", "level": 2, "text": "- Added the possibility to use configMaps and secrets in the generic mount interface.\nPlease see the *generic* example for details\n"}
+{"chapter": "September 2024, release 1.2.1500", "level": 2, "text": "- Update to nscale 9.2.1502\n- Added value `logForwarder.db` to set a fully qualified path to the database file, in case you do not want to have it along the logs.\nExample:\n```\nlogForwarder:\n- name: Accounting\npath: \"/opt/ceyoniq/nscale-server/storage-layer/accounting/*.csv\"\ndb: \"/opt/ceyoniq/nscale-server/storage-layer/logsdb/logs.db\"\n```\n- BASEFOLDER Value Typo corrected in SharePoint. Is now `Values.nappl.baseFolder`\n- The default value for `doInitialCrawl` was a bool. It is now a string `false` which is correct.\n- You can now add any extra Annotation to services and ingresses.\nExample:\n```\nglobal:\ningress:\nannotations:\nnginx.org/proxy-read-timeout: \"20s\"\nservice:\nannotations:\nconsul.hashicorp.com/service-sync: \"true\"\n```\n- Add `.this.ingress.proxyReadTimeout` to set this extra annotation to ingress objects\n- Ports can now be disabled in NetworkPolicies, if you use a CNI driver that does not support them.\nThis is especially for the \"endPort\" Attribute, that is currently not supported by Cilium.\n- Added port 443 to the egress in Network Policies for Pods accessing the K8s API\n- there was a duplicate podDisruptionBudget. Fixed it.\n- Fixed a bug with respect to Volume Names / Static Volumes and Storage Classes\n- Correction of documentation regarding `global.pullSecretOverride` (wrong, missing s) and `global.pullSecretsOverride` (correct)\n- Fixed a bug where PAM could not communication with JOBSNAPPL in a HA scenario\n"}
+{"chapter": "August 2024, release 1.2.1400", "level": 2, "text": "- Fixed bugs regarding KubePing Protocol in Version < 9.1\n- Fixed bugs regarding tenant-chart-agro. Be aware: It was the .helmignore after all.\n- Added nscale 9.1.1506 to versions and released the chart version to repo\n- The Application Chart now waits a minute before executing to prevent race condition problems\n- Setting SERVER_BASE_URL in Application Layer for SAML redirects to work\n- Added Liveness Probes\n- Added the possibility to define *PodDisruptionBudgets* for any component.\n- Added a readyness probe to postgres\n- reviewed the resource consumption and added better requests and limits. Also see the sample *resources*\n- Working on the documentation\n- updated sharepoint chart to meet the latest specs from Ceyoniq\n- Sharepoint Connector is now a StatefulSet\n- SharePoint DoInitialCrawl now defaults to false\n- Changed nstl and sharepoint updateStrategy to OnDelete\n- Update Sharepoint to version 9.2.1400\n- Update nscale auf 9.2.1402\n- The nstl HID Check was disabled by default, as it only made sense when using multiple volumes. Now, we habe pTemp since a few builds, so it makes\nsense now to store the hid file to pTemp. Therefore a new pTemp directory *hid* has been created to hold this file. The new sample *hid* shows how to turn this feature on.\n- nstl checks the *audit.log* size when starting up. After an update, the log directory on emptydir got deleted when re-creating the new pod. This caused\nthe audit log to be empty and caused an error. The log directory of nstl has also now moved to pTemp to avoid this.\n- Added *limitations.md* to the docs directory and READMEs\n- Update jsonl structure to get AI Support Assistent running\n- Health Check des SP Connectors nun auf `/nscale_spc/images/icons/PowerPoint.svg`\n- Added *generic mounts* to be able to add any pre provisioned PV to a container. Like a smb, nfs oder cifs share with migration data for pipeliner for example.\n- Moved the nstl cluster service to the nstl chart and made sure the default ports etc. are used correctly\n- Bugfix in domain name\n- Adding *Service* configuration section to most components. This section can be used to disable a components service (along with the potential ingress) to\nbe able to configure cluster services for retrieval (used in the SharePoint scenario). Please see the sharepoint sample for more information\n- Adding a clusterService configuration as an additional option to achieve above goal\n- Commented the SharePoint Probe out, because it needs work\n- New Instance Group Feature\nYou can set an alternative `.instance.group` to bundle multiple Instances together. This will allow traffic to be passed beween all instances within this group.\nThis is ment to be used for large instances that you might want to split up. Please see the `group` sample.\n- Fixed a bug in the resolver, preventing sliced maps to be deepCopied into .this\n- Fixed a bug concerning Postgres PullSecrets\n- Added pullSecretsOverride\n- waitFor can now be turned off if you feel argoWaves are all you need:\n```\nutils.disableWait: true\n```\n- argoCD Waves can now be turned off if you feel waitFor is all you need:\n```\nutils.disableWave: true\n```\n- Added FluentBit:2.0 as default LogForwarder e.g. for the Accounting Log.\n- Changed the default argoCD waves to make sure the prepper runs first\n- Fixed a bug, where the condition of the sharepoint instances were all bound to the same key\n- Adding *Maintenance Mode*, to start pods without starting the service, providing the possibility to gain access to the container to perform recovery tasks that need to be done offline. In order to do this:\n- All *waitFor* definitions are ignored\n- All *Health Checks* are ignored\n- The container starts in idle\n- Application Jobs are disabled\nYou can put a component, an instance or the whole environment into maintenance.\n- Adding a new values map: `.instance` holding `.instance.version` currently, showing the nscale Version installed (pinning the nappl)\n- Adding downward compatability for `nscaleVersion` and `componentVersion`\n- the *nplus Environment Chart* now has a *prepper* component you can turn on if needed\n- nstore Downloader is now *disabled* by default\n- Renamed Administrator Server aka RMS to *nplus Remote Management Server*\nThis should show the proximity to the *nscale Remote Management Service* and the idea of using a *virtual Server* for the rich Admin Client\n- worked on Documentation\n- Re-Structuring the Samples Directory\nBreaking Changes\n- The **storageClass** of a static volume is now set to empty (\"\") to prevent the PV from being bound to the wrong PVC. We also recommend putting a claimRef into your PV to make sure only the correct PVC can bind to it.\nYour PV also has to set the storage class to \"\" otherwise it will not bind.\nsee https://kubernetes.io/docs/concepts/storage/persistent-volumes/\n- Slicing Environment Chart into Subcharts:\nThe Environment Chart is now an Umbrella Chart. It references the operator, toolbox, dav and backend separately. By that means, you can now also add those charts to the Instance Umbrella Chart with *SIM*\n- Adding *SIM* to Instance\nThe *Single Instance Mode* lets you run a single *nplus Instance* in your namespace. The Instance *should* be named after the namespace. You can turn on the environmental components *operator, toolbox, dav and backend* in the Instance chart to get a single chart that brings all it needs\n- Excluding \"globals\" from ArgoCD Values\nThere was a large globals section in the ArgoCD Application, that was unnecessary. It is removed\n- Adding *Prepper* as a component to deploy git assets prior to component deployment:\nSometimes you need to deploy assets like Web Snippets to the Instance *before* any other component is deployed and initially started. The prepper can be used to download assets from git, extract tarballs and then calling scripts to perform any custom action. The prepper has no waitFor condition, thus running directly after the PVs are created, which happens in the *backend* chart of the environment. *Prepper* ist much like the *Application* Chart, but it of course cannot deploy anything into an Application Layer, as the nappl not yet exists.\n- Adding download capability to the Application Chart\nYou can now define downloads, that the Application Chart should perform prior to executing any script or App Installation\n- CIFS Mode for File Storage, preventing chmod from being run in scripts, is now *on* by default.\n- Renamed the *nappl* Cluster, if there is no prefix (as in instance name == Release.namespace due to SIM)\n- fixed a bug, where some resources (defaultconfig, networkpolicies, database config, ...) were not created in the release namespace but the default\n- Added `includeNamespace`\nBy default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later\nPotentially Breaking Changes:\n- The former Environment Chart used non-Standard Labels you might have used for your firewall rules. These are now normalized and the new environmental components behave just like any other component.\n- Introduced *ptemp* as a persistent temp space, e.g. for the accounting logs or database dumps etc.\n- Accounting in Storage Layer: set `accounting: true` and the csv files will be written to *ptemp*\n"}
+{"chapter": "July 2024, release 1.2.1303", "level": 2, "text": "- customizingMode as new switch in *web*\n- fixed a bug with timezone data\n- Add a key to switch off certificate generation if no issuer is set: createSelfSignedCertificate\n- Added tcps as port with 3006 to nstl\n- Fixed a bug with the resolver in combination with the instance name: Resolving was too late for some\nString operations.\n- Normalized all examples that no more includes are used in templates (are not necessary any more) and also\nsingle quotes are normalized to double quotes for strings, as we now do not need to use double quotes for the\nincludes any more.\n- Adding nscale Web tls and completing Zerotrust Mode\n- Changed the default of priorityClasses: It is now OFF. See FAQ for documentation\n- global flags and defaults for TZDATA / Timezone setting\nBig things:\n- An all new Values sub-system:\n- You can now stage **any** value!\n- You can now override **any** value on **any** stage!\n- This also works with your own values for your custom charts\n- templates used in values are automatically and recursively resolved. This also works with your custom values!\n- Update to nscale 9.2.1302\n- Many cleanups\nBreaking Changes:\n- new .Values section: *meta*\n- *nscaleVersion* is now in section meta\n- *componentVersion* is now in section meta\n- *ports* is now in section meta\n- *type* is now in section meta\n- *wave* is now in section meta\n- *commercial.tenant* is now in section meta\n- *commercial.provider* is now in section meta\nNon breaking Changes:\n- *this*\nIn code, you can now refer to `.this.*` instead of `.Values.*`.\n*this* is build from .Values (for component values), .Values.global (for instance values) and .Values.global.environment (for environment values) automatically\n- automatic resolver\nafter condensing the `.Values` into `.this`, a new recursive resolving function now looks for any template used in values and resolves it (using `.this` values)\n- new .Values section: *override*\nThis section is automatically applied to all .this, overwriting any existing value.\n*override* is also subject to automativ compression and resolving\n- Helper functions are moved from _helper.tpl to a new map in code, accessible via `$.component`.\nif you used helper functions in your templates, you need to port them. They are still working, but are depricated.\n- *_depricated.tpl* now holds depricated functions. They resolve to the new function / value and are subject for being removed in future majors.\n- new debugging mechanism:\nYou might want to debug your values and functions and helm lacks some important functionality for this, like a callstack.\nThe new debug feature now provides this functionality. You can call `nplus.debug.enter` and `nplus.debug.leave` in your code to\nadd this functionality to your own definitions.\n- debugging Values:\nif debugging is enabled, Values are reported in the component custom resource. Just search for `DEBUG` in `helm template` code.\n- to enable debug, set `debug: true` on any level. Example:\n```\nglobal:\nenvironment:\nutils:\ndebug: true\n```\n- debug also adds strict mode, so depricated functions are failing\n- *init function*\nif you want to use the new functionality (.this, .component, ...) in your template, call `include \"nplus.init\"` as first line in your code.\nIt initializes automatically\n- new .component section with calculated values for you to use in your templates.\n- fixed a bug, where nappl sync wave is after application sync wave (ArgoCD)\n- Sorting and Documenting the default ArgoCD Waves (see quickstart-argo)\nBreaking changes:\n- renamed nstlIPRange to nstlIpRange\n- In Application Chart, renamed .Values.rs to .Values.rs.host\n- In Application Chart, renamed .Values.nstl to .Values.nstl.host\n- changes in database Values.yaml, please check if you used it\nNon breaking changes:\n- Added nstlIpRange to the Storage Layer Chart to allow to open egress connections from internal Storage Layer to servers outside the cluster\n- New *defaultConfig* possibility to add default config files to Charts that are used prior to image templates (e.g. for a common cold.xml)\n- Added *sessionCacheStorageType* as a new parameter for NAPPL\n- Adding *dbIpRange* to the cni security options\n"}
+{"chapter": "June 2024, release 1.2.1204", "level": 2, "text": "- RMS now including HA Mode (see samples)\n- Fixes a problem, that the SNC Files are not in the NAPPL lib directory\n- Encrypt Sample\n- ZeroTrust Mode\n- Code cleanup\n"}
+{"chapter": "June 2024, release 1.2.1203", "level": 2, "text": "- Allow Application Scripts to run before and after globally and per DocArea\n- Add more logging to DAV Container\n- Add PAM and SharePoint Connector to dsl\n"}
+{"chapter": "June 2024, release 1.2.1202", "level": 2, "text": "- Allow multiple nscale SharePoint Connector instances with a separate configuration each\n- Allow Certificate Stores to be defined as configMaps OR secrets\n- current alpha Version of nscale SharePoint Connector for testing\n"}
+{"chapter": "June 2024, release 1.2.1201", "level": 2, "text": "- Fixed a bug in nscale Web due to the read only file system\n- Added SNC support to access SAP Server\n- Added Java Certificate Keystores (cacerts and component.store)\n"}
+{"chapter": "June 2024, release 1.2.1200", "level": 2, "text": "- Update to nscale Version 9.2.1200\n- Adding nscale PAM (Process Automation Modeler) helm chart\n- Adding nscale SharePoint Connector helm Chart\n- Adding O365 Sample (with SP Connector)\n- Support extra fonts (like Microsoft Core Fonts)\n- Allow calling global or local custom installation scripts during initialization (application chart)\n- Add Applications to Health Status\n- Adding a *Zero Trust* Example (`zerotrust.yaml`). The functionality is not yet completely implemented, so this is alpha status.\n- Temporarily adding Custom Project API container (\"dms-api\") to the instance\n- Alpha Version of Ports cleanup\n"}
+{"chapter": "May 2024, Release 1.2.11xx", "level": 2, "text": "- Support envFrom in all components, with secretRef. Set the secret name in `envSecret`\n- Support whitelisting in ingresses\n- Add Inter Pod AntiAffinity\n- Now using kube-linter for pre-release checking\n- Supporting CNI NetworkPolicies\n"}
+{"chapter": "Apr 2024, Release 1.2.1004", "level": 2, "text": "- Test with nscale 9.2\n- Operator Web GUI switch\n- Deny in all ingresses\n- Added Priority Classes\n- Added Budgets\n- Support for volumeName in PVC to supress dynamic provisioning of PVs\n- Support for kubePing **and** KUBERNETES Discovery for Cluster Communication\n- Documentation Updates\n- Updates to dsl (nstl and operator)\n- Bug Fixes\n"}
+{"chapter": "Mar 2024, Release 1.1.1501", "level": 2, "text": "- Added the Operator\n- Web GUI for Monitoring\n- RBAC enhancements\n- Remote Management Server (RMS) Preview\n"}
+{"chapter": "Feb 2024, Release 1.1.1401", "level": 2, "text": "- Added Administrator Client\n"}
+{"chapter": "Jan 2024, Release 1.1.1302", "level": 2, "text": "- Changed Packaging to enable new helm Repo (gitea)\n- Update dsl (C4) config files\n- Added support for up to 4 Storage Layer\n"}
+{"chapter": "Jan 2024, Release 1.1.1301", "level": 2, "text": "- Fixed Application Chart Security Settings\n- Added possibility to easily overwrite Versions\n(see versions/*.yaml and e90 Example)\n- Added Charts for nscale Administrator (RAP) and WebDAV Connector\n- Added nstl Cluster (up to 4 Storage Layer)\n- Added support for Docker Desktop Kubernetes\n"}
+{"chapter": "Jan 2024, Release 1.1.1300", "level": 2, "text": "- Added Security Features:\n- root-less Container\n- dropped capabilities (all)\n- read only root file systems on all container\n- Prohibit Privilege Escalation\n- New Toolbox Image\n- new (controlled source) \"wait\" function\n- new (controlled source) \"webdav server\" function\n- Change DB Image to bitnami beacuse of better support for security features.\n- User 1001 instead of 999\n- no chown necessary\n- support for read-only root\n- Support multi-temp paths (because of read-only root)\n"}
+{"chapter": "23 December Release", "level": 2, "text": "- Security Features:\n- Support for Illumio Labels and Gates\n"}
diff --git a/ai/jsonl/image.jsonl b/ai/jsonl/image.jsonl
new file mode 100644
index 0000000..0970b75
--- /dev/null
+++ b/ai/jsonl/image.jsonl
@@ -0,0 +1 @@
+{"chapter": "Common Image Configuration", "level": 2, "text": "The `image` configuration consists of\n- the Image Name\n- the Image Repository\n- the Image Tag\n- the Image Pull Policy\nIf the Pull Policy is not set, it is automatically `IfNotPresent`.\nThe `Repository` can be overridden at Instance Level and Environment Level to accomodate multiple stages:\n```\nimage:\nname: test\ntag: 1.0.0\nrepo: cr.nplus.cloud          # Prio 3\npullPolicy: Always\nglobal:\nrepo: myrepo_i1               # Prio 4\nrepoOverride: myrepo_i2       # Prio 2\nenvironment:\nrepo: myrepo_e1             # Prio 5\nrepoOverride: myrepo_e2     # Prio 1\n```\nIn this example, finding the repo to use would be:\n```helm\n$repo := global.environment.repoOverride | default global.repoOverride | default image.repo | default global.repo | default global.environment.repo\n```\nOnce you override the repo, you might als want to override the `pullSecrets` globally to allow login to your private registry. Since you do not want to do that per image definition, you - just like the repos - can override that globally:\n```\nglobal:\npullSecretsOverride:\n- myPrivateRegistrySecret\n```\nThe override procedure is identical to the repo example above.\n**The Use Case** is to easily enable you to download the images to a private and secure registry. *nplus* by default uses the official registries, but\nthat is most likely not wanted by enterprise customers. So you can just set your own registry in the environment and keep dev, qa and prod apart and secured.\n"}
diff --git a/ai/jsonl/ingress.jsonl b/ai/jsonl/ingress.jsonl
new file mode 100644
index 0000000..c8db551
--- /dev/null
+++ b/ai/jsonl/ingress.jsonl
@@ -0,0 +1,2 @@
+{"chapter": "Common Ingress Configuration", "level": 2, "text": "The Ingress Configuration can be performed at various levels:\n- Per Component / Chart\n`ingress.`\n- Per Instance\n`global.ingress.`\n- Per Environment\n`global.environment.ingress.`\nThis enables you to have configuration yaml files per environment (e.g. for DEV, QA and PROD) setting environment defaults.\nYou then do not have to touch the Instance configuration.\nExample:\n```\nhelm upgrade -i \\\n--values $SAMPLES/big-instance.yaml \\\n--values $SAMPLES/applications.yaml \\\n--values $SAMPLES/dev.yaml \\\ndemo nplus/instance-argo\n```\nYou might have your Instance values in the `big-instance` file, the Apps you want to have deployed to that instance\nin the `applications` file, and then you add your default setting for the `dev` stage, potentionally overwriting anything\nfrom the above. The priority in this is *last one wins*.\n> The Values are taken by the chart in the following order:\n> Component, then Instance, then Environment.\nIf no value is set, the configuration is dropped from the manifest.\nIn the following table, you see what value can be defined in which section:\n| Key  | Component  | Instance  | Environment |\n| ---- | ----------- | ----------- | ----------- |\n| domain | ✔︎ | ✔︎ | ✔︎ |\n| issuer | ✔︎ | ✔︎ | ✔︎ |\n| class | ✔︎ | ✔︎ | `public` |\n| enabled | ✔︎ | - | - |\n| backendProtocol | ✔︎ | - | - |\n| cookie | ✔︎ | - | - |\n| inputPath | ✔︎ | - | - |\n| deny  | ✔︎ | - | - |\n| whitelist | ✔︎ | ✔︎ | ✔︎ |\n| namespace | ✔︎ | ✔︎ | ✔︎ |\nFor the component ingress, you can specify the following values:\n| Key | Description | Default |\n|-----|-------------|---------|\n| backendProtocol | choose wether you want http or https as the backend protocol. This will encrypt traffic from the ingress controller to your pods if you set it to https. | `\"http\"` |\n| class | sets the ingressclass to use. e.g. `public` or `nginx` | `\"public\"` |\n| cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web | component dependent |\n| domain | sets the ingress domain, like `tenant1.mydomain.com`. If no domain is set, no ingress will be configured automatically | none |\n| enabled | on component level, enable or disable the ingress | component dependent |\n| inputPath | this defines the path (on component level) for this component Example: `nscale_web` for nscale Web | component dependent |\n| issuer | if you use *cert-manager* or any other certificate issuer, you can add the class here to hand certificate issuing requests to this issuer. if you do not set any issuer, the chart will generate a self-signed certificate for your ingress (if you defined a domain) |  |\n| deny | you can specify specific paths to be denied by this ingress | component dependent |\n| whitelist | optionally specify a list of allowed ip ranges to use an ingress | not restricted |\n| namespace | when securing the instance with network policies, you can specify the source namespace of the ingress controller | \"ingress\" |\n| annotations | adds extra annotations\n> Please the the FAQ for information about using a DMZ, where additional cluster configuration will be necessary\n"}
+{"chapter": "Annotations", "level": 3, "text": "You can add extra Annotations to the ingress by adding\n```\nglobal:\ningress:\nannotations:\nnginx.org/proxy-connect-timeout: \"30s\"\nnginx.org/proxy-read-timeout: \"20s\"\nnginx.org/client-max-body-size: \"4m\"\nnginx.org/server-snippets: |\nlocation / {\nreturn 302 /coffee;\n}\n```\n"}
diff --git a/ai/jsonl/java.jsonl b/ai/jsonl/java.jsonl
new file mode 100644
index 0000000..d8bc81c
--- /dev/null
+++ b/ai/jsonl/java.jsonl
@@ -0,0 +1 @@
+{"chapter": "Definig Java VM Resources", "level": 2, "text": "For those components implemented in Java, it is possible to set Java Options:\n- nscale CMIS Connector\n- nscale ILM Connector\n- nscale Application Layer\n- nscale Rendition Server\n- nscale Web\n| Key | Description | Default |\n|-----|-------------|---------|\n| javaOpts.javaMaxRamPercentage | Maximum memory given to Java in % | - |\n| javaOpts.javaMinMem | Minimum memory given to Java | - |\n| javaOpts.javaMaxMem | Maximum memory given to Java | - |\n| javaOpts.javaMisc | Additional Java Options | - |\n> **Note**: if you defined settings for *appDynamics*, the agent will automatically be added to the Java Options when the above components are run. Please refer to `global.appDynamics.agent` for more information.\n"}
diff --git a/ai/jsonl/mounts.jsonl b/ai/jsonl/mounts.jsonl
new file mode 100644
index 0000000..d32a770
--- /dev/null
+++ b/ai/jsonl/mounts.jsonl
@@ -0,0 +1,12 @@
+{"chapter": "Common Storage Configuration", "level": 2, "text": "This works just the same way as the Ingress settings: The Configuration can be performed at various levels:\n- Per Component / Chart\n`storage.`\n- Per Instance\n`global.storage.`\n- Per Environment\n`global.environment.storage.`\nThis enables you to have configuration yaml files per environment (e.g. for DEV, QA and PROD) setting environment defaults.\nYou then do not have to touch the Instance configuration.\nFor storage, there are several volume types:\n- **conf**, Shared File, RWX, global per environment\n- **data**, Disk, RWO, optional per component\n- **file**, Shared File, RWX, optional per ReplicaSet\n- **temp**, EmptyDir\n- **ptemp**, Shared File, RWX, global per environment\n- **log**, EmptyDir, should be empty, so just in case\n- **pool**, optional path on the conf share mounted by some components\n- **generic**, allows to mount any pre-defined PV into a container\n"}
+{"chapter": "conf", "level": 3, "text": "The *conf* storage is a global PVC with RWX (file) shared by every component in the environment. The component creates a sub directory\non the share and mounts it to the config directory in the container.\n`storage.conf.name` sets the name of the PVC to be created and used.\n`mounts.conf.path` defines the target directory in the container.\nAs the environment normally provides the *conf* share, you can set the class and the size in the environment.\nIf you habe your RWX storage class provided by a CIFS / SMB shared file system, you need to disable linux commands like *chmod*.\nThis can be done in the storage environment settings:\n```\nglobal:\nenvironment:\nstorage:\nconf:\ncifs: true\n```\n"}
+{"chapter": "data", "level": 3, "text": "Every component can create a data PVC with RWO (disk). You can set the `class` for this disk directly at the mount definition `mounts.data.class`. If unset, it uses the definition for the data class from `global.storage.data.class` or from the environment definition at `global.environment.storage.data.class`.\nIf the class is not defined, it is not included in the manifest and so the cluster default is taken.\nSet the size at `mounts.data.size`.  No default for the size.\n"}
+{"chapter": "file", "level": 3, "text": "Every component can create a file PVC with RWX (shared file). You can set the `class` for this share directly at the mount definition `mounts.file.class`. If unset, it uses the definition for the file class from `global.storage.file.class` or from the environment definition at `global.environment.storage.file.class`.\nIf the class is not defined, it is not included in the manifest and so the cluster default is taken.\nSet the size at `mounts.file.size`.  No default for the size.\nThis file mount is used for example for the *nscale Rendition Server* to create a common workload directory for all PODs across cluster nodes.\n"}
+{"chapter": "temp", "level": 3, "text": "If a *temp* mount point is given in the values file, it creates an `emptyDir` volume with the `sizeLimit` of `mounts.temp.size`. If no limit is given, the volume will have no limit and the cluster node default is used.\nIf you want to back this volume by memory, specify `mounts.temp.medium: memory`. Be aware, that this will utilize a RAM disk and count against your PODs resources.\n> The *nscale Application Layer* caches fulltext data in temp. Please be aware of your component behaviour when setting medium and size. Your plugins might be requireing speed or size.\n"}
+{"chapter": "ptemp", "level": 3, "text": "*ptemp* is a shared, persistant version of temp. It is used to store temporary data, that needs to live beyond the life of a pod, like exports from the database or account logs from storage layer.\nThe ptemp is created by the environment and all pods are free to use it, just like conf.\n"}
+{"chapter": "logs", "level": 3, "text": "If a *logs* mount point is given in the values file, it creates an `emptyDir` volume with the `sizeLimit` of `mounts.logs.size`. If no limit is given, the volume will have no limit and the cluster node default is used.\nThe components are writing logs to `stdout` and `stderr`, so the logs directory should not be necessary. This is just in case any plugin writes something to the contaainers file system.\nAdditionally, if you use the *nplus Remote Management Server* component, you might want the legacy way of reading log files, and this would be the storage for that.\n"}
+{"chapter": "pool", "level": 3, "text": "You can define a path at `mount.pool`, then this component will have access. This is used to hand binary data to the components, such as plugins or *nscale Generic Base Apps* along with the *nscale App Installer*.\n"}
+{"chapter": "Pre-Created Persistent Volumes", "level": 3, "text": "For security reasons, Persistent Volumes can be pre-created and then referenced by the PVC. In order to do so, you can set\n- `storage.conf.volumeName` in the environment configuration to set a specific volume reference for the config share, and\n- `mounts.data.volumeName` in each components values to set a specific volume reference for the (optional) data volume, as well as\n- `mounts.file.volumeName` in each components values to set a specific volume reference for the (optional) file volume\nAs the volume is specific to a certain volume, it cannot be set globally.\n"}
+{"chapter": "Setting storage values", "level": 3, "text": "| Key  | Component  | Instance  | Environment |\n| ---- | ----------- | ----------- | ----------- |\n| conf.name | ✔︎ | ✔︎ | `conf` |\n| data.class | ✔︎ | ✔︎ | ✔︎ |\n| data.size | ✔︎ | - | - |\n| data.paths | predefined list | - | - |\n| data.volumeName | ✔︎ | - | - |\n| file.class | ✔︎ | ✔︎ | ✔︎ |\n| file.size | ✔︎ | - | - |\n| file.paths | predefined list | - | - |\n| file.volumeName | ✔︎ | - | - |\n| temp.size | ✔︎ | - | - |\n| temp.medium | ✔︎ | - | - |\n| temp.path | predefined | - | - |\n| logs.size | ✔︎ | - | - |\n| logs.medium | ✔︎ | - | - |\n| logs.path | predefined | - | - |\nAvoid to change the values marked as *predefined*.\n"}
+{"chapter": "Working with Certificates", "level": 3, "text": "There are two types of certificates than you might want to customize in your deployment:\n- (Root-) Certificate Authorities\n- Private Certificates and Key Files\n**Root CA** extensions will be needed if you want to access other services via https (egress), that have certificates signed by a non-default authority.\nIn that case, you can upload the authority (public) certificate to trust it.\nThe process differs from component to component, as some are written in java (and require the certificate to be inside a keystore)\nand others are written in C++ or else and might require a PEM certificate store (like the Storage Layer).\nFirst thing is to create the store in whatever format it is needed and then upload it into a secret. Within the helm values, you can then\nset the destination path and file name next to the secret where you stored the certificate. There can be multiple certificates.\n```\nmounts:\ncaCerts:\npaths:\n- \"/etc/pki/tls/certs/ca-bundle.crt\"\n- \"/usr/lib/jvm/jre/lib/security/cacerts\"\nsecret: ca-secret\n```\nIn this example, the secret *ca-secret* needs to hold two files:\n- a cacerts file (under that key), which is a java keystore file and will\nbe placed as the cacerts file in the Java deployment of the component (In this case the NAPPL).\n- a *ca-bundle.crt* file which is a PEM format file that holds all trusted CAs you need.\nThe *paths* list defines the path and filename of the target as well as the key of the files within the secret.\nIn Storage Layer, this might look like this:\n```\nmounts:\ncaCerts:\npaths:\n- \"/opt/ceyoniq/nscale-server/storage-layer/etc/CA.CER\"\nsecret: ca-secret\n```\nIn this case, the Sorage Layer requires the root ca certs to be a file of exactly this name in the etc directory of the deployment.\nPlease consult the storage layer manual for more information.\n**component Certificates** and Key files are normally used to hold private tls certificates to encrypt https traffic (ingress).\nThe configuration of these keystores is identical to the ca stores:\n```\nmounts:\ncomponentCerts:\npaths:\n- \"/opt/ceyoniq/nscale-server/application-layer/conf/certificates.store\"\nsecret:\n```\nIn this case, the secret must have a key named *certificates.store* that holds the java keystore with the required certificates.\n> Please note, that alternatively, you can also upload this file to the conf directory of the application layer. If you do not specify a secret, this\nmount will not be implemented.\nUploading to this file to the conf would be like this:\n```\nkubectl cp certificates.store nplus-toolbox-0:/conf/<myInstance>/nappl\n```\n**Alternatively, you can also define a configMap** for the public CA certificates, then the configuration would be like this:\n```\nmounts:\ncaCerts:\npaths:\n- \"/opt/ceyoniq/nscale-server/storage-layer/etc/CA.CER\"\nconfigMap: ca-map\n```\n"}
+{"chapter": "Using the generic mount interface", "level": 3, "text": "This allows you to mount any pre-provisioned PVs, secret or configMap as a directory or single file into any container.\nIt can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.\nUse the following format:\n```\nmounts:\ngeneric:\n- name: <name>:\npath: <the path in the container, where you want to mount this>\nvolumeName: <the name of the PV to be mounted>\nconfigMap: <the name of the configMap to bemounted>\nsecret: <the name of the secret to bemounted>\nsubPath: [a (optional) subpath to be used inside the PV]\naccessMode: <ReadWriteMany|ReadWriteOnce|ReadOnlyMany|ReadWriteOncePod>\nsize: <size request>\n```\nPlease see the *generic* sample in the samples directory for detailes.\n"}
diff --git a/ai/jsonl/operations1.jsonl b/ai/jsonl/operations1.jsonl
new file mode 100644
index 0000000..e80fc7b
--- /dev/null
+++ b/ai/jsonl/operations1.jsonl
@@ -0,0 +1,2 @@
+{"chapter": "Day 1 Ops: Install, Update, Uninstall", "level": 1, "text": "1. Install instance *sample*\nTo demonstrate, we use the sample-tenant chart we find in the samples directory. The main difference\nto the default instance chart is, that a domain is set to `*.sample.nplus.cloud`, so we will be able to\nlog into the web client right away if we redirected this domain correctly.\nYou can easily adopt the examples to your environment.\n```\nhelm install sample nplus/sample-tenant --version 9.0.1400\n```\n2. **Rolling update** of instance *sample* to a later monthly release\nAll nscale components support rolling updates, **but** the *nscale Application Layer*.\nAs the Application Layer has the connection to the database, and this depends on the DB scheme,\nonly cluster members with the same version can work with that DB at the same time.\nThere are no scheme updates in monthly releases, so we can use the default rolling updates here.\n```\nhelm upgrade sample nplus/sample-tenant --version 9.0.1501\n```\n3. **Minor / Major Update** of instance *sample*\nMinor or Major updates require the *nscale Application Layer* to have the same version on all cluster nodes. And since the *nscale Pipeliner* may also have an integrated *nappl* in core mode, we also need to update the pipeliner at the same time.\nWe first need to shut down all *nappl* cluster members, so set the *nscale Application Layer*, the potential *nappl Jobs Node* and the *nscale Pipeliner* stateful sets to replica 0.\nIn *nplus*, these replicaSets are labeled with `nplus/type=core`, so we can easily select them:\n```\nkubectl scale statefulset -l nplus/type=core,nplus/instance=sample --replicas=0\n```\nAfter that, the update is just like a monthly release:\n```\nhelm upgrade sample nplus/sample-tenant --version 9.1.1001\n```\n> As nplus does not know if you run the Pipeliner in core mode, make sure you change the default type `pipeliner` to `core` when installing, indicating that this pipeliner node needs to be scaled down as well.\n4. **Uninstall** the instance *sample*\n\n```\nhelm uninstall sample\n```\n"}
+{"chapter": "Install, Update, Uninstall *with argoCD*", "level": 1, "text": "1. Install instance *sample-argo*\n```\nhelm install sample-argo nplus/sample-tenant-argo --version 9.0.1400\n```\n2. **Rolling update** of instance *sample-argo* to a later monthly release\n```\nhelm upgrade sample-argo nplus/sample-tenant-argo --version 9.0.1501\n```\n3. **Minor / Major Update** of instance *sample-argo*\nThe difference to a deployment without argoCD is, that if we manually scale down the *nappl* cluster nodes,\nargoCD tries to immediately **heal** this discrepancy between the description and the status.\nSo we first switch off this healing mechanism, to be able to scale down:\n```\nkubectl -n argocd  patch --type='merge' application sample-argo -p \"{\\\"spec\\\":{\\\"syncPolicy\\\":null}}\"\n```\nAfter that, it is the same update procedure as we have with a standard deployment:\n```\nkubectl scale statefulset -l nplus/type=core,nplus/instance=sample-argo --replicas=0\nhelm upgrade sample-argo nplus/sample-tenant-argo --version 9.1.1001\n```\nWhen done, we switch the healing back on which will start to re-sync and recreate all cluster members\nwith the new version:\n```\nkubectl -n argocd patch --type=merge application sample-argo -p \"{\\\"spec\\\":{\\\"syncPolicy\\\":{\\\"automated\\\":{\\\"prune\\\":true,\\\"selfHeal\\\":true}}}}\"\n```\n4. **Uninstall** the instance *sample-argo*\n\n```\nhelm uninstall sample-argo\n```\n"}
diff --git a/ai/jsonl/operations2.jsonl b/ai/jsonl/operations2.jsonl
new file mode 100644
index 0000000..addbcba
--- /dev/null
+++ b/ai/jsonl/operations2.jsonl
@@ -0,0 +1,11 @@
+{"chapter": "Day 2 Ops: Tips & Tricks", "level": 1, "text": ""}
+{"chapter": "Re-Installation, re-using the former volumes", "level": 2, "text": "Whether with or without ArgoCD, the used volumes can be reattached during reinstallation. However, a few steps are required:\n1. **Before** deleting the instance, set the instance volumes to *Retain*:\n```bash\nkubectl get pv | grep Delete | grep demo-argo | cut -d' ' -f1 | xargs -I PV_NAME \\\nkubectl patch pv PV_NAME -p '{\"spec\":{\"persistentVolumeReclaimPolicy\":\"Retain\"}}'\n```\n2. **After** deletion, these volumes will be in *Released* state.\nHere, the ID of the old PVC must be deleted, but not the entire Ref, otherwise, the disk cannot be assigned to the instance and service later.\n```bash\nkubectl get pv -A | grep Released | grep demo-argo | cut -d' ' -f1 | xargs -I PV_NAME \\\nkubectl patch pv PV_NAME --type json -p '[{\"op\": \"remove\", \"path\": \"/spec/claimRef/uid\"}]'\n```\nNow, the volumes are in an *Available* state and still have the *claimRef* of the instance and the component. If you now recreate the instance, these disks/volumes will be correctly reused.\nExample:\n```bash\nhelm upgrade --install demo-argo nplus/instance-argo --version 9.1.1001\n```\nHowever, if you create an instance with a different name, the claimRefs won't match, and new volumes will be generated.\n"}
+{"chapter": "Cleanup / Completely remove an instance", "level": 2, "text": "1. **Uninstall** the helm charts\nDeletion is *Cascading*, meaning it deletes everything it installed.\n```bash\nhelm uninstall demo-argo\nhelm uninstall demo\n```\n2. The **configuration** is in the **git** of the Toolbox, and it needs to be removed\n```bash\nkubectl exec --stdin --tty nplus-0 -- rm -rf /conf/demo\nkubectl exec --stdin --tty nplus-0 -- rm -rf /conf/demo-argo\n```\n3. If the volumes were **not** on *Delete* but on *Retain*, they can be deleted:\n```bash\nkubectl get pv -A | grep Released | grep \"demo\" | cut -d' ' -f1 | xargs -n1 kubectl delete pv\n```\nNow you can start over.\n"}
+{"chapter": "Working with Persistent Volumes", "level": 2, "text": ""}
+{"chapter": "Delete all \"Released\" PV", "level": 3, "text": "```bash\nkubectl get pv -A | grep Released | cut -d' ' -f1 | xargs -n1 kubectl delete pv\n```\n"}
+{"chapter": "Delete all \"Available\" PV", "level": 3, "text": "```bash\nkubectl get pv -A | grep Available | cut -d' ' -f1 | xargs -n1 kubectl delete pv\n```\n"}
+{"chapter": "Make \"Released\" PVs available again", "level": 3, "text": "1. Switch Delete to Retain:\n```bash\nkubectl get pv | grep Delete | grep demo-argo | cut -d' ' -f1 | xargs -I PV_NAME \\\nkubectl patch pv PV_NAME -p '{\"spec\":{\"persistentVolumeReclaimPolicy\":\"Retain\"}}'\n```\n2. Delete ClaimRef UID\n```bash\nkubectl get pv -A | grep Released | grep demo-argo | cut -d' ' -f1 | xargs -I PV_NAME \\\nkubectl patch pv PV_NAME --type json -p '[{\"op\": \"remove\", \"path\": \"/spec/claimRef/uid\"}]'\n```\n"}
+{"chapter": "Monitoring", "level": 2, "text": "The Monitoring Console can be configured through the RAP Administrator. For each component to be monitored, an entry needs to be added in a component group (RMS doesn't exist!).\nAs a \"computer,\" FQDN, `<instance>.<service>.<namespace>` can be used, for example, `demo-ha-nappl-0.demo-ha-nappl.lab`.\n"}
+{"chapter": "Restart a pod", "level": 2, "text": "A Pod might be stuck and you might need to re-deploy this replicaset.\nThis example restarts the *web* component of instance *empty*:\n```\nkubectl rollout restart $(kubectl get deployment,statefulset -l nplus/component=web,nplus/instance=empty -o name)\n```\nTo restart all replicasets without available pods, use\n```\nkubectl get deployment,statefulset --field-selector=status.availableReplicas=0\n```\n"}
+{"chapter": "Delete pending pods to have them re-created by the replicasets", "level": 2, "text": "When a pod gets into pending state forever, that is due to a lack of resources, tolerations or missing PVs.\nYo should correct the cause and then you can simply delete the pod and have it re-created by the RS.\nThis is how you get all pending pods:\n```bash\nkubectl get pods --field-selector status.phase=Pending\n```\nYou can delete all of them by\n```bash\nkubectl delete $(kubectl get pods --field-selector status.phase=Pending -o name)\n```\n"}
+{"chapter": "Deleting all jobs", "level": 2, "text": "```bash\nkubectl delete $(kubectl get jobs -o name)\n```\n"}
diff --git a/ai/jsonl/overview.jsonl b/ai/jsonl/overview.jsonl
new file mode 100644
index 0000000..4c464b3
--- /dev/null
+++ b/ai/jsonl/overview.jsonl
@@ -0,0 +1,6 @@
+{"chapter": "Setting up a demo / dev infrastructure", "level": 1, "text": "- If you do not have a running system yet, please see the [Infrastructure Guide](docs/infrastructure.md) to install a *microk8s* based demo system\n- If you like to run a full demo system incl. ArgoCD, MetalLb, and cert-manager, please see the [Add-On Guide](docs/addons.md) and read how to add the additional components to your demo *microk8s* cluster\n"}
+{"chapter": "Getting the first *nplus Instance* up and running", "level": 1, "text": "- In the [Quickstart Guide](docs/quickstart.md), you will learn how to install the first nplus system.\n- To check out the installation of an nplus Instance using ArgoCD, please see the [ArgoCD Quickstart Guide](docs/quickstart-argo.md).\n"}
+{"chapter": "Examples of more complex setups", "level": 1, "text": "- Have a look at the [samples directory](samples) to see how Instances get deployed in the *nplus Demo Environment*.\n"}
+{"chapter": "Operations", "level": 1, "text": "- [Day One Operations](docs/operations1) shows how to install, update and uninstall instances\n- [Day Two Operations](docs/operations2) explains how to re-use Persistent Volumes, Perform a proper cleanup after uninstall and tips on monitoring\n"}
+{"chapter": "Limitations, Cookbook & FAQ", "level": 1, "text": "- please note the [limitations](docs/limitations.md) of the system\n- there is a FAQ located [here](docs/faq.md)\n- *nplus* also has a [cookbook](docs/cookbook.md), which is an *easy reading* version of all the READMEs from the samples. So basically you will get all source files of the [cookbook](docs/cookbook.md) in the [samples directory](samples)\n"}
+{"chapter": "Further Reading", "level": 1, "text": "- For each component, there are corresponding instructions in the README of the chart.\nYou can always get the most up-to-date information via Helm, for example, for the Instance Chart:\n```\nhelm show readme nplus/nplus-instance\n```\nor here:\n**Environment**\n\n- [nplus Environment Chart README](charts/environment/README.md)\n\n**Instance**\n\n- [nplus Instance Chart README](charts/instance/README.md)\n- [nplus Instance ArgoCD Chart README](charts/instance-argo/README.md)\n\n**Components**\n\n- [nscale Application Layer Chart README](charts/nappl/README.md)\n- [nscale Storage Layer Chart README](charts/nstl/README.md)\n- [nscale Pipeliner Chart README](charts/pipeliner/README.md)\n- [nscale CMIS Connector Chart README](charts/cmis/README.md)\n- [nscale ILM Connector Chart README](charts/ilm/README.md)\n- [nscale Web Chart README](charts/web/README.md)\n- [nscale Monitoring Console Chart README](charts/mon/README.md)\n- [nscale Rendition Server Chart README](charts/rs/README.md)\n- [nscale Process Automation Modeler Chart README](charts/rms/README.md)\n- [nscale Sharepoint Connector Chart README](charts/sharepoint/README.md)\n- [nscale WebDAV Connector Chart README](charts/webdav/README.md)\n- [nplus Remote Management Server Chart README](charts/rms/README.md)\n- [Postgres Database Chart README](charts/database/README.md)\n\n**Application**\n\n- [nplus Application Chart README](charts/application/README.md)\n- Please see the [Version History](HISTORY.md) for a changelog\n"}
diff --git a/ai/jsonl/priority.jsonl b/ai/jsonl/priority.jsonl
new file mode 100644
index 0000000..b375ffa
--- /dev/null
+++ b/ai/jsonl/priority.jsonl
@@ -0,0 +1 @@
+{"chapter": "Priority Class", "level": 2, "text": "You can select a specific *PriorityClass* which is then used for this component. If you enable `createClass`, it will be created.\n"}
diff --git a/ai/jsonl/quickstart-argo.jsonl b/ai/jsonl/quickstart-argo.jsonl
new file mode 100644
index 0000000..a636a90
--- /dev/null
+++ b/ai/jsonl/quickstart-argo.jsonl
@@ -0,0 +1,9 @@
+{"chapter": "Adding ArgoCD", "level": 1, "text": "In order to be able to deploy *nplus instances* using ArgoCD, you need to add the Chart Repository to Argo:\n```\ncat << EOF | kubectl apply -f -\napiVersion: v1\nkind: Secret\nmetadata:\nname: nplus-repo\nnamespace: argocd\nlabels:\nargocd.argoproj.io/secret-type: repository\nstringData:\ntype: helm\nurl: https://git.nplus.cloud\npassword: $NPLUS_TOKEN\nusername: $NPLUS_ACCOUNT\nEOF\n```\n> This requires the Environment Variables for the *NPLUS_ACCOUNT* and *NPLUS_TOKE* to be set. Check the Quickstart Guide if you are uncertain\nNow you are good to go adding an instance using ArgoCD. We will re-use the myinstance.yaml we created during the Quickstart Guide. You will also find it in [Samples](../samples/myinstance.yaml).\n```\nhelm upgrade -i \\\n--values myinstance.yaml \\\nmyinstance-argo nplus/nplus-instance-argo\n```\nThe only difference with ArgoCD is, that we use a different Chart for the instance: *nplus-instance-argo*.\nThe settings / values file is identical.\n![&nbsp](assets/argo1.png)\nArgoCD will automatically pick up the new instance and start installing it.\nYou can check via command line\n```\n# kubectl get instance\nNAME              HANDLER   VERSION    TENANT    STATUS\nmyinstance        Helm      9.1.1501   default   healthy\nmyinstance-argo   argoCD    9.1.1501   default   healthy\n```\nOr via agroCD Web UI the current status of the deployment\n![&nbsp](assets/argo2.png)\n>  The Instance will report *healthy* in argoCD as well as using command line, even though the SBS Installer is not ready yet (as Applications are installed asynchronously as soon as the instance is healthy)\nAs soon as the Application Installer is done, it looks like this:\n![&nbsp](assets/argo3.png)\n"}
+{"chapter": "Monitoring ArgoCD", "level": 1, "text": "ArgoCD also has a custom resource, called *application*. The nscale argoCD Resources are created in the *argocd* Namespace. You can get them by\n```\n"}
+{"chapter": "kubectl get app -n argocd", "level": 1, "text": "NAME              SYNC STATUS   HEALTH STATUS\nmyinstance-argo   Synced        Healthy\n```\nOf course you can also check with\n```\n"}
+{"chapter": "kubectl get instances", "level": 1, "text": "NAME              HANDLER   VERSION    TENANT    STATUS\nmyinstance        Helm      9.1.1501   default   healthy\nmyinstance-argo   argoCD    9.1.1501   default   healthy\n```\nBut if you require detailed information, the best is to start describing the argoCD App:\n```\n"}
+{"chapter": "kubectl describe app myinstance-argo -n argocd", "level": 1, "text": "```\nThis gives you a much higher level of detail.\n"}
+{"chapter": "Troubleshooting ArgoCD", "level": 1, "text": ""}
+{"chapter": "Cache", "level": 2, "text": "ArgoCD caches helm Chart content. This can be a problem especially during development, when you might now always increase version numbers.\nThen, you might want to hard reset an argoCD Appication to void the cache:\n```\nkubectl patch app/myinstance-argo -n argocd --type merge -p='{\"metadata\": {\"annotations\":{\"argocd.argoproj.io/refresh\": \"hard\"}}}'\n```\n"}
+{"chapter": "Finalizer", "level": 2, "text": "Finalizers in Kubernetes are taking care of cleanup tasks. Sometimes, these finalizers in argoCD get stuck on deleting complex nplus instances. As a last option, you might want to try removing the finalizer and then cleaning the instance up manually:\n```\nkubectl patch app/myinstance-argo -n argocd \\\n--type json \\\n--patch='[ { \"op\": \"remove\", \"path\": \"/metadata/finalizers\" } ]'\n```\nThen delete the argoCD Application:\n```\nkubectl delete app/myinstance-argo -n argocd\n```\nSince the finalizer did not clean up, all *nplus instance* parts are still there. Luckily, they are labeled, so easy to identify:\n```\nkubectl get all,pvc,ing -l nplus/instance=myinstance-argo\n```\nWe can now use this list to delete everything:\n```\nkubectl delete $(kubectl get all,pvc,ing -l nplus/instance=myinstance-argo -o name)\n```\n> ArgoCD does not use helm to install but rather get the helm template and renders it internally. So there is no need to clean up helm after removing the argo app.\n"}
+{"chapter": "Default Waves", "level": 1, "text": "The instance chart has some default waves defined. You can use them or overwrite the values with your own demands:\n- **wave 1**: prepper\n- **wave 2**: requirements: nstl, database\n- **wave 3**: essential services: rs, nappljobs, nappl (standalone, if jobs are enabled)\n- **wave 4**: hook: free to use for anything that needs to be done before the cluster starts\n- **wave 5**: consumer services: nappl (serving consumers) if jobs are disabled\n- **wave 6**: consumer services: web\n- **wave 7**: peripheral services: mon, pipeliner, ilm, cmis, webdav, sharepoint\n- **wave 8**: tools: administrator, pam\n- **wave 9**: tools: rms (Remote Management Server)\n- **wave 10**: solutions: application (incl. GBAs)\n"}
diff --git a/ai/jsonl/quickstart.jsonl b/ai/jsonl/quickstart.jsonl
new file mode 100644
index 0000000..f082531
--- /dev/null
+++ b/ai/jsonl/quickstart.jsonl
@@ -0,0 +1,17 @@
+{"chapter": "*nplus* Quickstart Guide", "level": 1, "text": "The charts are built in a way that they provide minimal functionality without any configuration, using default values.\n- If you want ingress, you have to configure the domain. Without the domain set, your charts will not have any default way to access them. However, you can still forward traffic to them or configure a *NodePort* or *LoadBalancer* manually.\n- If you want proper TLS, you need a certificate. Without the certificate provided, a self-signed certificate will secure your connection.\n- If you want specific storage, configure the storage class to use. Without it, you will get the default class for RWO and RWX.\nThis Quick Start example has nothing configured, so you will get:\n- No ingress, and\n- Default storage.\n"}
+{"chapter": "Access to the *nplus* Subscription and the nscale License", "level": 1, "text": "You need access to:\n- The *nplus* Helm chart repository\n- The *nplus* container registry\n- The *nscale* license\n- The *nscale* container registry\nIn the next examples, we will use environment variables to access:\n```bash\nNPLUS_ACCOUNT=\"[your nplus subscription]\"\nNPLUS_TOKEN=\"[your nplus access token]\"\nNSCALE_ACCOUNT=\"[your account to access the Ceyoniq container registry]\"\nNSCALE_TOKEN=\"[the access token for above]\"\nNSCALE_LICENSE=\"[the path and license file to use]\"\n```\n"}
+{"chapter": "The nplus helm repository", "level": 2, "text": "You can register the *nplus* Helm registry:\n```bash\nhelm repo add nplus https://git.nplus.cloud \\\n--username $NPLUS_ACCOUNT \\\n--password $NPLUS_TOKEN\nhelm repo update\n```\nYou should now be able to access the charts:\n```bash\n% helm search repo nplus --versions --devel\nNAME                            CHART VERSION  APP VERSION  DESCRIPTION\ngitea/nplus-application         9.1.1201-16    0.2.2        Application Chart\ngitea/nplus-application         9.1.1201-15    0.2.2        Application Chart\ngitea/nplus-application         9.1.1201-14    0.2.2        Application Chart\n...\n```\n> The `--devel` option gives you beta versions as well. Otherwise, you will only see release versions.\n"}
+{"chapter": "The nscale license", "level": 2, "text": "Make sure you received an nscale license that fulfills the following criteria:\n- `Container: 1` - otherwise it will not allow to be run in a container environment\n- The Storage Layer `ServerID` *must not* be included in the license, as we cannot override it if it is fixed\n- `FullyQualifiedHostName: 0` - If this setting is *on*, the nstl will not work without the ServerID in the license\n- `DomainOnly: 1` - If this setting is *on*, the nstl will not work without the ServerID in the license\n- `hostname: \"*\"` - As hostnames are not really deterministic in Kubernetes, we need a license that allows the hosts to\nhave *any* name.\n- Make sure you have the storage adapter licensed, that you want to use (like S3, Azure BlobStore or Harddisk)\n- Optional: If you want High Availability with *nscale Server Storage Layer*, you need to have\n`DistributedService: 1`, otherwise the nstl instances can not communicate.\n"}
+{"chapter": "*nplus* Cluster Resources", "level": 1, "text": "*nplus* also includes Cluster Resources (independent of Namespaces). These need to be installed first and globally.\n```bash\nhelm install nplus nplus/nplus-cluster\n```\nYou only need to perform this step once per Cluster, regardless of Environments/Namespaces.\n> If you don't want the *nplus* Helm application to appear in the current Namespace, you can install it as follows:\n```bash\nhelm template nplus nplus/nplus-cluster | kubectl apply -f -\n```\nAfter installing the cluster chart, you can test it by asking your cluster for deployed nscale resources:\n```bash\n$ kubectl get instance,component\nNo resources found in lab namespace.\n```\n*Instances* (also accessible via *nscale* or *nplus*) and *components* are custom resource definitions. Every Instance/Component installed will add an instance/component resource, and an *nplus operator* (which comes with the environment chart) will continuously check the instance/component health and report it via this command line or a web interface (see below).\n"}
+{"chapter": "Create an *nplus* Environment", "level": 1, "text": "You can deploy *nplus* into a Kubernetes namespace. If you do not specify one, you will use the default one, which is fine for our test cluster. If you use namespaces, you can have multiple *nplus* environments in your cluster. Any environment can operate multiple *nplus* instances. Every *nplus* instance normally holds many components, each being *ReplicaSets* with multiple replicas.\nTo create a simple *nplus* environment without any additional features, deploy it into your new cluster:\n> By setting `--devel`, we are fetching the latest development version\n```bash\n% helm install --devel demo nplus/nplus-environment\nNAME: demo\nLAST DEPLOYED: Tue Dec 19 16:39:51 2023\nNAMESPACE: default\nSTATUS: deployed\nREVISION: 1\nTEST SUITE: None\nNOTES:\nnplus-environment 0.2.2-16 / 0.2.2\nThis Environment Chart provides a common config pool and administrative tools to operate all nplus instances in this namespace. There must be exactly one deployed instance of this environment chart. Without the environment, the instance and component charts will fail to deploy.\nTo uninstall, use\nhelm uninstall demo\nThe environment DAV Server is disabled.\nThe nstore Downloader is disabled.\nThe toolbox is disabled.\nProviding 10Gi of storage under the name \"conf\" of class \"default\"\n```\nNow you have an empty cluster ready to get a first instance deployment.\n"}
+{"chapter": "Single Instance Mode", "level": 1, "text": "If you want to separate tenants on your system not only by instance but also by environment / namespace, you can run *nplus* in *single instance mode*.\nSIM (Single Instance Mode) lets you deploy your instance including all components of the environment in one single chart. Please see the [Instance README.md](../charts/instance/README.md) file for more details. This Quickstart Guide however is **not** using SIM.\n"}
+{"chapter": "Deploy an *nplus* Instance", "level": 1, "text": "Before we can deploy the first *nplus* Instance, we need to add the Secrets for the registries and also the nscale license to the environment:\n```bash\nkubectl create secret docker-registry nscale-cr \\\n--docker-server=ceyoniq.azurecr.io \\\n--docker-username=$NSCALE_ACCOUNT \\\n--docker-password=$NSCALE_TOKEN\nkubectl create secret docker-registry nplus-cr \\\n--docker-server=cr.nplus.cloud \\\n--docker-username=$NPLUS_ACCOUNT \\\n--docker-password=$NPLUS_TOKEN\nkubectl create secret generic nscale-license \\\n--from-file=license.xml=$NSCALE_LICENSE\n```\n> Make sure the license key is called `license.xml` as that is used as the key in the charts.\nSecrets are namespace-dependent (one cannot access secrets from other namespaces), so we have to deploy them for every environment/namespace we use in our cluster.\nThere are multiple ways of deploying an *nplus* Instance, the easiest one is by simply calling the helm install on the command line:\n```bash\nhelm install --devel myinstance nplus/nplus-instance\n```\nYou can check the status of the instance using:\n```bash\n"}
+{"chapter": "kubectl get instance", "level": 1, "text": "NAME         HANDLER   VERSION    TENANT    STATUS\nmyinstance   Helm      9.1.1501   default   starting\n```\nAnd the component status with:\n```bash\n"}
+{"chapter": "kubectl get components", "level": 1, "text": "NAME                                             INSTANCE     COMPONENT       TYPE            VERSION    STATUS\ncomponent.nplus.cloud/myinstance-nstl            myinstance   nstl            nstl            9.1.1200   healthy\ncomponent.nplus.cloud/myinstance-rs              myinstance   rs              rs              9.1.1300   healthy\ncomponent.nplus.cloud/myinstance-database        myinstance   database        database        15         healthy\ncomponent.nplus.cloud/myinstance-nappl           myinstance   nappl\ncore            9.1.1501   healthy\ncomponent.nplus.cloud/myinstance-web             myinstance   web             web             9.1.1500   healthy\ncomponent.nplus.cloud/myinstance-administrator   myinstance   administrator   administrator   9.1.1500   healthy\n```\nYou can check the log files of the *Application Layer* for instance by typing:\n```bash\n"}
+{"chapter": "kubectl logs -l nplus/instance=myinstance,nplus/component=nappl", "level": 1, "text": "```\n> Notice the locator in the logs example: Instead of telling kubectl the name of the pod or rs, we use locators because there may be multiple instances of these pods later, and we want to see all logs in one go (or have ELK, EFK, Splunk, or anything similar to do that for us).\n"}
+{"chapter": "Adding an Ingress", "level": 1, "text": "We need to know the available ingressClasses in our new Kubernetes Cluster, so we check that:\n```bash\n"}
+{"chapter": "kubectl get ingressclass", "level": 1, "text": "NAME     CONTROLLER             PARAMETERS   AGE\npublic   k8s.io/ingress-nginx   <none>       72m\nnginx    k8s.io/ingress-nginx   <none>       72m\n```\n*Microk8s* comes with the most common classes, which both point to the same controller (in this case, nginx). *public* is indeed the default class for *nplus*. So we do not need to set that; it is already configured. We just need to tell the *nplus* instance to use a Domain for the ingress:\n```bash\nhelm upgrade --devel \\\n--set global.ingress.domain=myinstance.demo.nplus.cloud \\\nmyinstance nplus/nplus-instance\n```\nThis now activates an ingress for [https://myinstance.demo.nplus.cloud/nscale_web](https://myinstance.mydomain.demo.nplus.cloud/nscale_web). The easiest and fastest is probably to add the IP to the server into your `/etc/hosts` file.\n"}
+{"chapter": "Adding a Certificate", "level": 1, "text": "After just adding the domain, the browser will complain about the self-signed certificate. You can easily add your certificate into the secret `myinstance.demo.nplus.cloud-tls`, which has been created for you.\nHowever, the canonical way is to have *cert-manager* or a similar tool take care of your certificates and have them generated by your CA or *Lets Encrypt* or similar.\nIf you have a running instance of cert-manager, you just need to specify the issuer:\n```bash\nhelm upgrade --devel \\\n--set global.ingress.domain=myinstance.demo.nplus.cloud \\\n--set global.ingress.issuer=nplus-issuer \\\nmyinstance nplus/nplus-instance\n```\nIn this example, *nplus-issuer* is the name of the issuer we created during the [Addons Guide](docs/addons.md).\nYou can now access your new instance with [https://myinstance.demo.nplus.cloud](https://myinstance.demo.nplus.cloud) or whatever domain you might have for it.\n"}
+{"chapter": "Adding an Application", "level": 1, "text": "Trying to log in to your new instance will probably give you an error message:\n![Web Error](assets/noda.png)\nSo we need to create the Document Area and maybe even add some Business App.\nBusiness Apps can be installed from the *pool*. The *pool* is a shared file system, the *nplus environment* exposes to the *nplus instances*. This is handled by the *toolbox* feature, which is disabled by default.\nSo first, we enable it:\n```bash\nhelm upgrade --devel \\\n--set toolbox.enabled=true \\\n--set nstoreDownloader.enabled=true \\\ndemo nplus/nplus-environment\n```\nAnd while we are at it, we also enable the *nstore downloader*, which is a job running in the background automatically downloading the latest business app installer from Ceyoniq.\nIt will take a couple of minutes before the apps are downloaded by the job. You can peek into the folder:\n```bash\nkubectl exec --stdin --tty nplus-toolbox-0 -- ls -lais /conf/pool\n```\nThe Business Apps alone will not install without a proper *App-Installer*. You can download it from the Ceyoniq Service Portal. Once you have it, upload it to the pool as well:\n```bash\nkubectl cp app-installer-9.0.1202.jar nplus-toolbox-0:/conf/pool\n```\nNow, you have everything you need to get an App up:\n- The App Installer\n- Apps\nThe Command Line for installing our *myinstance* Instance is getting quite large, so here is how to put all that into one (or more) yaml files. Create a yaml called *myinstance.yaml* and add the following (which is identical to the command lines above plus the App Install)\nNotice that the domain is using a template function in this example. This adds the ability to reuse the same yaml for multiple instances. We will reuse it for the ArgoCD sample during the [ArgoCD Quickstart Guide](quickstart-argo.md).\n```yaml\nglobal:\ningress:\ndomain: \"{{ .Release.Name }}.demo.nplus.cloud\"\nissuer: \"nplus-issuer\"\ncomponents:\napplication: true\napplication:\nappInstaller: \"/pool/app-installer-9.0.1202.jar\"\ndocAreas:\n- id: \"SBS\"\nname: \"DocArea with SBS\"\ndescription: \"This is a sample DocArea with the SBS Apps installed\"\napps:\n- \"/pool/nstore/bl-app-9.0.1202.zip\"\n- \"/pool/nstore/gdpr-app-9.0.1302.zip\"\n- \"/pool/nstore/sbs-base-9.0.1302.zip\"\n- \"/pool/nstore/sbs-app-9.0.1302.zip\"\n- \"/pool/nstore/tmpl-app-9.0.1302.zip\"\n- \"/pool/nstore/cm-base-9.0.1302.zip\"\n- \"/pool/nstore/cm-app-9.0.1302.zip\"\n- \"/pool/nstore/hr-base-9.0.1302.zip\"\n- \"/pool/nstore/hr-app-9.0.1302.zip\"\n- \"/pool/nstore/pm-base-9.0.1302.zip\"\n- \"/pool/nstore/pm-app-9.0.1302.zip\"\n- \"/pool/nstore/sd-base-9.0.1302.zip\"\n- \"/pool/nstore/sd-app-9.0.1302.zip\"\n- \"/pool/nstore/kon-app-9.0.1302.zip\"\n- \"/pool/nstore/kal-app-9.0.1302.zip\"\n- \"/pool/nstore/dok-app-9.0.1302.zip\"\n- \"/pool/nstore/ts-base-9.0.1302.zip\"\n- \"/pool/nstore/ts-app-9.0.1302.zip\"\n- \"/pool/nstore/ocr-base-9.0.1302.zip\"\n```\nThis yaml will:\n- Switch on the *application chart*, which will install Apps\n- Tell the application to use the App Installer we just uploaded\n- Define a new Document Area (*SBS*) to be created\n- And then finally, in this example, we install SBS completely based on the Apps we downloaded from *nstore*. Make\nsure your license covers SBS; otherwise, it will fail.\nThen, you can upgrade *myinstance* with the new settings:\n```bash\nhelm upgrade \\\n--values myinstance.yaml \\\nmyinstance nplus/nplus-instance\n```\n> You can specify multiple values files, so it is fine to have one for the environment settings, one for the instance settings, and a third one for the application settings. This way, you can easily create multiple instances with shared settings to have maximum re-usage among instances.\nYou can follow the application installer using:\n```bash\n"}
+{"chapter": "kubectl logs -l job-name=myinstance-application -f", "level": 1, "text": "...\nDefaulted container \"run\" out of: run, wait-for-myinstance-nappl (init), copy-conf (init)\n2024-03-11 16:08:33,918 [main] INFO  com.ceyoniq.nscale.appconfig.NscaleServerWriter - updating CustomConfiguration Procurement to 9.0.1302\n2024-03-11 16:08:33,993 [main] INFO  com.ceyoniq.nscale.appconfig.NscaleServerWriter - finished app configuration..\nApp '/pool/pm-app-9.0.1302.zip' successfully installed\ninstall App /pool/sd-base-9.0.1302.zip into SBS\nTry installation of app zip: /pool/sd-base-9.0.1302.zip\n2024-03-11 16:08:36,406 [main] INFO  com.ceyoniq.nscale.businessapps.sd.base.Installer - App ('sd-app') not installed yet. Installing version 9.0.1302\n2024-03-11 16:08:43,031 [main] INFO  com.ceyoniq.nscale.appconfig.NscaleMapper.Icons - Installing icons..\n2024-03-11 16:08:43,033 [main] INFO  com.ceyoniq.nscale.appconfig.NscaleMapper.Folders - Installing Folders..\n2024-03-11 16:08:43,037 [main] INFO  com.ceyoniq.nscale.appconfig.NscaleMapper.FolderTemplates - Installing FolderTemplates..\n...\ndone config scripts.\nrunning application scripts\nRunning /application/*.sh\ndone application scripts.\n```\nOnce it is done, close your browser (to make sure you open a fresh session) and try to log in again:\n![&nbsp](assets/web.png)\n> Admin does not have any SBS user roles by default; that is why you do not see any Apps after login.\n"}
+{"chapter": "Further Reading", "level": 1, "text": "- You will find more complex examples in the [samples directory](/samples).\n- Please have a look at the README.md of the charts to explore more configuration options:\n```bash\nhelm show readme nplus/nplus-environment\nhelm show readme nplus/nplus-instance\n```\n- There are also charts for every component used by the instance umbrella chart.\n- You can also start configuring your instance by retrieving and altering the values.yaml of the chart.\n```bash\nhelm show values --devel nplus/nplus-instance > myinstance.yaml\n```\nThen edit this file. When you are done, apply it:\n```bash\nhelm upgrade --devel \\\n-f myinstance.yaml \\\nmyinstance nplus/nplus-instance\n```\n> Please be aware that the umbrella `values.yaml` does **not** contain all possible configuration options of the child charts.\n"}
diff --git a/ai/jsonl/resources.jsonl b/ai/jsonl/resources.jsonl
new file mode 100644
index 0000000..b241f8e
--- /dev/null
+++ b/ai/jsonl/resources.jsonl
@@ -0,0 +1 @@
+{"chapter": "Handing Resources to Components", "level": 2, "text": "By default, no resources are set on the container. Thus, Kubernetes handles the container with best effort.\nResources can be set at\n| Key | Description | Default |\n|-----|-------------|---------|\n| resources.requests.cpu | sets the request, which is the minimum guaranteed | - |\n| resources.requests.memory | sets the request, which is the minimum guaranteed | - |\n| resources.limits.cpu | sets the limit, which is the maximum allowed | - |\n| resources.limits.memory | sets the request, which is the maximum allowed | - |\n- if nothing is defined, Kubernetes handles it BestEffort\n- if requests are defined, but no limits, Kubernetes handles it Burstable\n- if both are defined, Kubernetes handles it Guaranteed\nPlease take caution when setting parameters and also have a look at this interesting article regarding resources and JVM resource handling:\nhttps://xebia.com/blog/kubernetes-and-the-jvm/\n"}
diff --git a/ai/jsonl/security.jsonl b/ai/jsonl/security.jsonl
new file mode 100644
index 0000000..fba5cc0
--- /dev/null
+++ b/ai/jsonl/security.jsonl
@@ -0,0 +1,6 @@
+{"chapter": "Security settings", "level": 2, "text": "You can set the security options per *component*, per *instance* or per *environment*.\nThe priority is:\n1. component\n2. instance\n3. environment\nIt is recommended to set the security per environment to make sure you do not forget a component.\n"}
+{"chapter": "Illumio", "level": 3, "text": "Example `environment` setting for Illumio:\n```\nglobal:\nenvironment:\nsecurity:\nillumio:\nenabled: true\nloc: \"mylocation\"\nsupplier: \"mysupplier\"\nplatform: \"myplatform\"\nreadinessGates:\n- conditionType: \"com.illumio.policy-ready\"\n```\n"}
+{"chapter": "CNI, such as Calico or Cilium", "level": 3, "text": "Example `environment` setting for CNI:\n```\nglobal:\nenvironment:\nsecurity:\ncni:\ndefaultIngressPolicy: deny\ndefaultEgressPolicy: deny\ncreateNetworkPolicy: true\nexcludeUnusedPorts: false\n```\n**excludeUnusedPorts** can add a port config to your ingress rules. However, not every CNI is capable of all Attributes (like `EndPort` is currently not supported by cilium).\nSo you can switch this off, if your CNI does not support it.\n"}
+{"chapter": "zeroTrust Policy", "level": 3, "text": "Some Tools like Cilium transparently encrypt the Node to Node traffic in a Cluster. If you, however, want to aditionally deny all http traffic within a node, you can\nenable `zeroTrust` by setting:\n```\nglobal:\nsecurity:\nzeroTrust: true\n```\nPlease make sure you also set all backendProtocols to https. For a complete example, please see the sample values file `zerotrust.yaml` in the samples directory.\n"}
+{"chapter": "Encrypted backend", "level": 3, "text": "An optional approach to zeroTrust (see above) is to set the backenProtocol to http. This leaves the http ports available (zeroTrust would not),\nbut switches the component backend traffic to https (for ingress, probes, ...).\nIt is not as strict as zeroTrust and can be set per component like this:\n```\ningress:\nbackendProtocol: https\n```\nPlease see the example file `encrypt.yaml` in the samles directory for more information.\n"}
+{"chapter": "Security Context", "level": 3, "text": "You can add a `containerSecurityContext` to the component by adding it in the values file:\n```\nsecurity:\ncontainerSecurityContext:\ncapabilities:\ndrop: [\"ALL\"]\n```\nAdditionally, add a `podSecurityContext` if desired:\n```\nsecurity:\npodSecurityContext:\nrunAsNonRoot: true\nrunAsUser: 1000\nrunAsGroup: 1000\n```\n> **Note**: This setting can not be set on instance or environment level.\n"}
diff --git a/assets/logo_nplus.svg b/assets/logo_nplus.svg
new file mode 100755
index 0000000..ec29c3b
--- /dev/null
+++ b/assets/logo_nplus.svg
@@ -0,0 +1,13 @@
+<svg width="409.54" height="137.724" viewBox="0 0 409.54 137.724" xmlns="http://www.w3.org/2000/svg" xmlns:usvg="https://github.com/RazrFalcon/usvg" usvg:version="0.8.0">
+    <defs/>
+    <path fill="#706f6f" d="M 16.563 98.469 L 27.607 35.867 C 41.857 35.867 46.91 35.789 62.647 35.789 C 72.471 35.789 79.041 37.431 82.388 40.7 C 85.751 43.97 86.705 49.711 85.25 57.923 L 78.117 98.469 L 67.026 98.469 L 73.831 59.864 C 74.957 53.419 74.582 49.164 72.642 47.131 C 70.687 45.081 66.401 44.112 59.784 44.065 L 37.117 43.956 L 33.926 62.524 L 27.575 98.47 L 16.563 98.47 Z"/>
+    <path fill="#706f6f" d="M 206.62 35.814 C 210.264 35.82 213.168 37.089 215.335 39.62 C 217.499 42.152 218.265 45.175 217.63 48.687 L 210.96 85.575 C 210.324 89.09 208.466 92.109 205.388 94.631 C 202.308 97.155 198.946 98.415 195.302 98.409 L 159.299 98.357 L 154.899 122.213 L 142.899 122.196 L 158.617 35.745 L 206.62 35.814 Z M 196.433 88.832 C 197.946 87.593 198.866 86.072 199.192 84.272 L 205.397 49.954 C 205.707 48.241 205.333 46.74 204.277 45.453 C 203.22 44.165 201.759 43.521 199.892 43.518 L 169.223 43.473 L 160.694 90.644 L 191.363 90.689 C 193.23 90.691 194.919 90.073 196.433 88.832 Z"/>
+    <path fill="#706f6f" d="M 222.642 98.469 L 237.925 11.762 L 248.937 11.762 L 233.653 98.469 Z"/>
+    <path fill="#706f6f" d="M 273.316 98.469 C 281.91 98.469 308.407 98.469 308.407 98.469 L 319.45 35.762 L 308.422 35.762 L 298.875 90.374 C 298.875 90.374 282.817 90.374 276.201 90.374 C 261.231 90.374 260.172 85.6 262.136 74.422 L 268.95 35.763 L 257.847 35.763 L 250.701 76.369 C 248.405 89.466 250.036 98.469 273.316 98.469"/>
+    <path fill="#706f6f" d="M 355.75 90.028 C 364.607 89.982 370.188 89.274 372.525 87.922 C 374.97 86.476 376.415 84.478 377.138 80.388 C 377.829 76.436 377.399 73.792 375.846 72.453 C 374.293 71.131 369.942 70.316 362.854 70.009 C 360.209 69.885 356.642 69.762 352.152 69.655 C 342.297 69.44 336.546 68.871 334.839 67.979 C 332.271 66.719 330.595 64.981 329.78 62.797 C 328.98 60.583 328.95 57.431 329.672 53.31 C 330.856 46.575 333.731 42.009 338.313 39.641 C 342.879 37.258 352.197 36.059 366.313 36.059 C 375.323 36.059 383.595 36.151 392.606 36.151 L 391.191 44.208 L 361.208 44.208 L 361.223 44.116 L 361.054 44.116 C 352.95 44.116 347.661 44.716 345.232 45.961 C 342.772 47.176 341.265 49.405 340.558 53.311 C 340.142 55.694 340.066 57.386 340.296 58.339 C 340.558 59.307 341.172 60.046 342.157 60.537 C 344.186 61.491 348.922 62.044 356.41 62.198 C 358.316 62.244 359.747 62.29 360.777 62.322 C 366.897 62.522 371.663 62.767 375.107 63.121 C 378.536 63.429 380.965 63.875 382.334 64.459 C 385.378 65.704 387.377 67.473 388.361 69.763 C 389.314 72.07 389.422 75.422 388.638 79.819 C 387.854 84.278 386.593 87.661 384.825 89.983 C 383.056 92.305 380.289 94.319 376.476 96.102 C 374.739 96.948 372.063 97.563 368.388 97.916 C 364.76 98.286 359.731 98.47 353.351 98.47 C 350.537 98.47 347.938 98.409 345.54 98.286 L 321.399 98.286 L 322.891 89.829 L 355.75 90.028 Z"/>
+    <path fill="#b3c7e8" d="M 123.756 61.427 L 112.083 61.427 L 110.025 73.1 L 121.698 73.1 Z"/>
+    <path fill="#b3c7e8" d="M 138.619 61.427 L 126.946 61.427 L 124.887 73.1 L 136.56 73.1 Z"/>
+    <path fill="#b3c7e8" d="M 121.2 76.235 L 109.527 76.235 L 107.469 87.908 L 119.142 87.908 Z"/>
+    <path fill="#b3c7e8" d="M 109.004 61.427 L 97.331 61.427 L 95.273 73.1 L 106.946 73.1 Z"/>
+    <path fill="#b3c7e8" d="M 126.584 46.482 L 114.911 46.482 L 112.853 58.155 L 124.526 58.155 Z"/>
+</svg>
diff --git a/assets/sample.sh b/assets/sample.sh
new file mode 100644
index 0000000..8e5a904
--- /dev/null
+++ b/assets/sample.sh
@@ -0,0 +1,2 @@
+#!/bin/bash
+echo "This does nothing but showing how to call scripts during the deployment process"
diff --git a/assets/sample.tar.gz b/assets/sample.tar.gz
new file mode 100644
index 0000000..0cbb174
Binary files /dev/null and b/assets/sample.tar.gz differ
diff --git a/charts/README.md b/charts/README.md
new file mode 100644
index 0000000..b24269e
--- /dev/null
+++ b/charts/README.md
@@ -0,0 +1,100 @@
+# nplus Charts
+
+These are the sources to the nplus Charts. There are 4 levels:
+
+1. Cluster
+2. Environment
+3. Instance
+4. Component
+
+## Cluster
+
+The ***cluster*** chart is responsible for installing all prerequisites for nplus into the Kubernetes Cluster. This is specifically the CRDs later used by the environment.
+
+## Environment
+
+The ***environment*** chart installes the nplus operator, toolbox etc. into a Kubernetes namespace, making this namespace capable of housing nplus Instances
+
+## Instance
+
+The ***instance*** and ***instance-argo** charts install an nplus Instance into an nplus Environment. Every Instance consist of any possible combination of componens:
+
+## Components
+
+### administrator
+
+This is the official nscale Administrator (Web / RAP). It connects to an Application Layer to store its state in the global client settings. It can however connect to any nscale component to perform the **online** configuration.
+
+### Prepper
+
+Downloads, deploys and runs any git asset or script prior to deployment of the components
+
+### application
+
+This handles the installation of solutions / scenarios / apps into a running instance.
+
+### cmis
+
+This component exposes a CMIS compatible interface, with REST and SOAP flavours. 
+
+### database
+
+The database charts installs a postgres instance into the nplus instance. It should not be used for production without further service.
+
+### ilm
+
+The ***ilm*** chart installs the *nscale ERP ILM Connector* which is a SAP certified ILM service.
+
+### proxy
+
+The ***proxy*** chart installs the *nscale ERP Proxy Connector* which is a SAP Content Service request forwarder to migrate alien Archiv Solutions to nscale
+
+### mon
+
+The ***mon*** chart adds a *nscale Monitoring Console* to the nplus instance.
+
+### nappl
+
+The ***nappl*** chart hosts an nscale Server Application Layer, which is a central component in the nscale ecosystem. Most nplus Instances should have at least one ***nappl*** instance. However, there are also scenarios like *central services* (see samples), where one would potentially not use a ***nappl*** within the nplus instance.
+
+### nstl
+
+A *nscale Server Storage Layer* is added by this ***nstl*** chart. The Storage Layer is basically a Blob Store Component, that virtualizes storage subsystems and adds a layer of legal compliance for many governmental requirements.
+
+In terms of storage subsystems, the ***nstl*** chart can be used to connect multiple storage subsystems like S3, Azure Blob Storage and also Hardware Stores like NetApp, EMC Centera etc.
+
+### pam
+
+This is a Chart for the *nscale Process Automation Modeler*, an administrative component that allows the definition of workflows or processes in BPMN on a web ui.
+
+### pipeliner
+
+The ***pipeliner*** chart installs the *nscale Pipeliner*. It also features an optional **WebDAV** component to provide upload capabilities.
+
+### rms
+
+The ***rms*** chart can be used as an *Adminstrator Server* for the nscale Administrator Client. The chart comes with the original nscale RMS component as well as a TCP Proxy, that allows to connect to the original component running in a container via TCP.
+
+The chart exposes its service through a virtual IP adress provided by a Kubernetes loadbalancer service.
+
+### rs
+
+The *nscale Rendition Server* is installed by this ***rs*** chart. It is used by the *nscale Application Layer* to render content into multiple formats.
+
+### sharepoint
+
+This is a chart for *nscale Sharepoint Connector*
+
+### web
+
+*nscale Web* is the official Web Client for *nscale*. It connects to a *nscale Application Layer* as the *EIM* backend. 
+
+### webdav
+
+*nscale WebDAV Connector* is a WebDAV Client for *nscale*. It connects to a *nscale Application Layer* as the *EIM* backend. It services a standard WebDAV protocol interface to be used by any WebDAV client.
+
+
+
+# Misc
+
+The ***global*** chart is a library chart with common functions used by all other charts. It cannot be installed.
\ No newline at end of file
diff --git a/charts/administrator/Chart.yaml b/charts/administrator/Chart.yaml
new file mode 100644
index 0000000..69a23ee
--- /dev/null
+++ b/charts/administrator/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-administrator
+description: nscale Administrator, providing the Web Version of the Administrator to be used in the Instance
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/administrator/README.md b/charts/administrator/README.md
new file mode 100644
index 0000000..21f766d
--- /dev/null
+++ b/charts/administrator/README.md
@@ -0,0 +1,174 @@
+
+
+# nplus-component-administrator
+
+nscale Administrator, providing the Web Version of the Administrator to be used in the Instance
+
+## nplus-component-administrator Chart Configuration
+
+You can customize / configure nplus-component-administrator by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"administrator"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/rapadm"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**javaOpts**&#8203;.javaMaxMem | set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed |   |
+**javaOpts**&#8203;.javaMaxRamPercentage | set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any. |   |
+**javaOpts**&#8203;.javaMinMem | set the minimum memory, java will consume |   |
+**javaOpts**&#8203;.javaMisc | Any misc Java Options that need to be passed to the container |  `"-Dorg.eclipse.rap.rwt.settingStoreFactory=settings-per-user"` |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"java"` |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8080` |
+**meta**&#8203;.ports&#8203;.https | The tls / https port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8443` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"administrator"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"administrator"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |   |
+**mounts**&#8203;.temp&#8203;.path | Sets the path to the temporary files <br>do not change this value | **info only**, do not change<br> `"/tmp"` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"1Gi"` |
+nameOverride | This overrides the output of the internal name function |   |
+**nappl**&#8203;.account | The technical account to login with |   |
+**nappl**&#8203;.domain | The domain of the technical account |   |
+**nappl**&#8203;.host | nappl host name |   |
+**nappl**&#8203;.instance | instance of the Application Layer, likely `instance1` |   |
+**nappl**&#8203;.password | The password of the technical accunt (if not set by secret) |   |
+**nappl**&#8203;.port | nappl port (http 8080 or https 8443) |   |
+**nappl**&#8203;.secret | An optional secret that holds the credentials (the keys must be `account` and `password`) |   |
+**nappl**&#8203;.ssl | sets the Advanced Connect to tls |   |
+nodeSelector | select specific nodes for this component |   |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+
diff --git a/charts/administrator/templates/component.tpl b/charts/administrator/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/administrator/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/administrator/templates/ingress.tpl b/charts/administrator/templates/ingress.tpl
new file mode 100644
index 0000000..293d27f
--- /dev/null
+++ b/charts/administrator/templates/ingress.tpl
@@ -0,0 +1,16 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/administrator/templates/networkpolicy.tpl b/charts/administrator/templates/networkpolicy.tpl
new file mode 100644
index 0000000..9ba1d34
--- /dev/null
+++ b/charts/administrator/templates/networkpolicy.tpl
@@ -0,0 +1,34 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+  policyTypes:
+  - Ingress
+  - Egress
+  ingress:
+
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+
+  egress:
+  - to:
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/administrator/templates/pvc.tpl b/charts/administrator/templates/pvc.tpl
new file mode 100644
index 0000000..b79132a
--- /dev/null
+++ b/charts/administrator/templates/pvc.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.pvc" . }}
diff --git a/charts/administrator/templates/service.tpl b/charts/administrator/templates/service.tpl
new file mode 100644
index 0000000..5afdba2
--- /dev/null
+++ b/charts/administrator/templates/service.tpl
@@ -0,0 +1,32 @@
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service,
+  # access is purely through an ingress if desired.
+  type: ClusterIP
+  clusterIP: None
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
+
diff --git a/charts/administrator/templates/statefulset.tpl b/charts/administrator/templates/statefulset.tpl
new file mode 100644
index 0000000..9c0fe55
--- /dev/null
+++ b/charts/administrator/templates/statefulset.tpl
@@ -0,0 +1,116 @@
+{{- include "nplus.init" $ -}}
+# Component: {{ .component.chartName }}
+# will connect to:
+{{- if (.this.nappl).host }}
+#   nappl: {{ if ($.this.nappl).ssl -}}https{{- else -}}http{{- end -}}://{{ ($.this.nappl).host }}:{{ (.this.nappl).port }}/{{ (.this.nappl).instance }}
+{{- else }}
+#   defined by config file in conf PV.
+{{- end }}
+#
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+
+spec:
+  serviceName: {{ .component.fullName }}
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: {{ .Values.replicaCount }}
+  podManagementPolicy: OrderedReady
+  updateStrategy:
+    type: {{ .Values.updateStrategy | default "OnDelete" }}  
+  minReadySeconds: 5
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+            
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+
+      containers:
+      - name: administrator
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+
+          {{- if ($.this.nappl).host }}
+          - name: APPLICATION_LAYER_HOST
+            value: {{ ($.this.nappl).host | quote }}
+          {{- end }}
+          {{- if ($.this.nappl).port }}
+          - name: APPLICATION_LAYER_PORT
+            value: {{ ($.this.nappl).port | quote }}
+          {{- end }}
+          {{- if ($.this.nappl).ssl }}
+          - name: APPLICATION_LAYER_SSL
+            value: {{ ($.this.nappl).ssl | quote }}
+          {{- end }}
+          {{- if ($.this.nappl).instance }}
+          - name: APPLICATION_LAYER_INSTANCE
+            value: {{ ($.this.nappl).instance | quote }}
+          {{- end }}
+
+        {{- include "nplus.environment" . | nindent 8 }}
+        
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+
+        startupProbe:
+          httpGet:
+            path: /rapadm/
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          initialDelaySeconds: 10
+          failureThreshold: 12
+          periodSeconds: 10
+          timeoutSeconds: 5
+        livenessProbe:
+          httpGet:
+            path: /rapadm/
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          periodSeconds: 30
+          timeoutSeconds: 1
+        readinessProbe:
+          httpGet:
+            path: /rapadm/
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          periodSeconds: 10
+          timeoutSeconds: 1
+        {{- end }}
+
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+
diff --git a/charts/administrator/values.schema.json b/charts/administrator/values.schema.json
new file mode 100644
index 0000000..3e21766
--- /dev/null
+++ b/charts/administrator/values.schema.json
@@ -0,0 +1,834 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "administrator",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullPolicy": {
+          "default": "IfNotPresent",
+          "title": "pullPolicy",
+          "type": "string"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.3.1201",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/rapadm",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "javaOpts": {
+      "additionalProperties": false,
+      "description": "Options for the Java VM",
+      "properties": {
+        "javaMaxMem": {
+          "default": "",
+          "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+          "title": "javaMaxMem"
+        },
+        "javaMaxRamPercentage": {
+          "default": "",
+          "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+          "title": "javaMaxRamPercentage"
+        },
+        "javaMinMem": {
+          "default": "",
+          "description": "set the minimum memory, java will consume",
+          "title": "javaMinMem"
+        },
+        "javaMisc": {
+          "default": "-Dorg.eclipse.rap.rwt.settingStoreFactory=settings-per-user",
+          "description": "Any misc Java Options that need to be passed to the container",
+          "title": "javaMisc"
+        }
+      },
+      "title": "javaOpts"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "description": "defines internal constants for nplus. do not change these values",
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "java",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8080",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "8443",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "administrator",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "administrator",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "/tmp",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nappl": {
+      "additionalProperties": false,
+      "description": "The nscale Application Layer, this component should talk to",
+      "properties": {
+        "account": {
+          "default": "",
+          "description": "The technical account to login with",
+          "title": "account"
+        },
+        "domain": {
+          "default": "",
+          "description": "The domain of the technical account",
+          "title": "domain"
+        },
+        "host": {
+          "default": "",
+          "description": "nappl host name",
+          "title": "host"
+        },
+        "instance": {
+          "default": "",
+          "description": "instance of the Application Layer, likely `instance1`",
+          "title": "instance"
+        },
+        "password": {
+          "default": "",
+          "description": "The password of the technical accunt (if not set by secret)",
+          "title": "password"
+        },
+        "port": {
+          "default": "",
+          "description": "nappl port (http 8080 or https 8443)",
+          "title": "port"
+        },
+        "secret": {
+          "default": "",
+          "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+          "title": "secret"
+        },
+        "ssl": {
+          "default": "",
+          "description": "sets the Advanced Connect to tls",
+          "title": "ssl"
+        }
+      },
+      "title": "nappl"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "There should only be a single Administrator instance, so the replicaCount is fixed to 1 @ignore -- Do not change this.",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/administrator/values.yaml b/charts/administrator/values.yaml
new file mode 100644
index 0000000..60b3f6f
--- /dev/null
+++ b/charts/administrator/values.yaml
@@ -0,0 +1,417 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: true
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/rapadm"
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path: "/tmp"
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the temporary disk (all paths)
+    size: "1Gi"
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size:
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path:
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+  file:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- Options for the Java VM
+javaOpts:
+  # -- set the percentage of RAM, Java will use of the total.
+  # The total amount is the amount installed in the K8s Cluster Node,
+  # OR the Memory Limit set (see resources), if any.
+  javaMaxRamPercentage:
+  # -- set the minimum memory, java will consume
+  javaMinMem:
+  # -- set the maximum memory, java will consume.
+  # Attention: This is NOT the real maximum and it does not include any non Java memory.
+  # Please read google, as this is highly discussed
+  javaMaxMem:
+  # -- Any misc Java Options that need to be passed to the container
+  javaMisc: "-Dorg.eclipse.rap.rwt.settingStoreFactory=settings-per-user"
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: administrator
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+  pullPolicy: IfNotPresent
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- defines internal constants for nplus.
+# do not change these values
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: administrator
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8080
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https: 8443
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: java
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: administrator
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- There should only be a single Administrator instance, so the replicaCount is
+# fixed to 1
+# @ignore -- Do not change this.
+replicaCount: 1
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- The nscale Application Layer, this component should talk to
+nappl:
+  # -- nappl host name
+  host:
+  # -- nappl port (http 8080 or https 8443)
+  port:
+  # -- sets the Advanced Connect to tls
+  ssl:
+  # -- instance of the Application Layer, likely `instance1`
+  instance:
+  # -- The technical account to login with
+  account:
+  # -- The domain of the technical account
+  domain:
+  # -- The password of the technical accunt (if not set by secret)
+  password:
+  # -- An optional secret that holds the credentials (the keys must be `account` and `password`)
+  secret:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/application/Chart.yaml b/charts/application/Chart.yaml
new file mode 100644
index 0000000..4abaa5d
--- /dev/null
+++ b/charts/application/Chart.yaml
@@ -0,0 +1,15 @@
+apiVersion: v2
+name: nplus-application
+description: nplus Application, used to install Apps and Customizations into the nscale Application Layer.
+icon: data:image/svg+xml;base64,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
+type: application
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+# It is recommended to use it with quotes.
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/application/README.md b/charts/application/README.md
new file mode 100644
index 0000000..8b3f354
--- /dev/null
+++ b/charts/application/README.md
@@ -0,0 +1,340 @@
+
+
+# nplus-application
+
+nplus Application, used to install Apps and Customizations into the nscale Application Layer.
+
+## AppInstaller
+
+In order to install Apps, you will need a matching AppInstaller. This can be downloaded from the Ceyoniq Service Portal.
+Once you have it, copy it the pool folder (or any other place where the application chart has access to):
+
+```
+kubectl cp app-installer-9.0.1202.jar nplus-toolbox-0:/conf/pool
+```
+
+## Ceyoniq Smart Business Apps (SBS)
+
+The SBS Apps are automatically downloaded from the official Ceyoniq nstore by a job in the *nplus environment*, if you switched it on during the environment installation:
+
+```
+nstoreDownloader.enabled: true
+```
+
+If enabled, the Downloader job will run regularly in the background, and download the latest SBS Apps in the pool folder.
+You can always enabled it in the environment chart later on if desired:
+
+```
+helm upgrade \
+    --set toolbox.enabled=true \
+    --set nstoreDownloader.enabled=true \
+    dev nplus/nplus-environment
+```
+
+## SBS Example
+
+You can install SBS by adding the necessary apps to the deployment:
+
+```yaml
+components:
+  application: true
+application:
+  appInstaller: "/pool/app-installer-9.0.1202.jar"
+  docAreas:
+    - id: "SBS"
+      name: "DocArea with SBS"
+      description: "This is a sample DocArea with the SBS Apps installed"
+      apps:
+      - "/pool/nstore/bl-app-9.0.1202.zip"
+      - "/pool/nstore/gdpr-app-9.0.1302.zip"
+      - "/pool/nstore/sbs-base-9.0.1302.zip"
+      - "/pool/nstore/sbs-app-9.0.1302.zip"
+      - "/pool/nstore/tmpl-app-9.0.1302.zip"
+      - "/pool/nstore/cm-base-9.0.1302.zip"
+      - "/pool/nstore/cm-app-9.0.1302.zip"
+      - "/pool/nstore/hr-base-9.0.1302.zip"
+      - "/pool/nstore/hr-app-9.0.1302.zip"
+      - "/pool/nstore/pm-base-9.0.1302.zip"
+      - "/pool/nstore/pm-app-9.0.1302.zip"
+      - "/pool/nstore/sd-base-9.0.1302.zip"
+      - "/pool/nstore/sd-app-9.0.1302.zip"
+      - "/pool/nstore/kon-app-9.0.1302.zip"
+      - "/pool/nstore/kal-app-9.0.1302.zip"
+      - "/pool/nstore/dok-app-9.0.1302.zip"
+      - "/pool/nstore/ts-base-9.0.1302.zip"
+      - "/pool/nstore/ts-app-9.0.1302.zip"
+      - "/pool/nstore/ocr-base-9.0.1302.zip"
+```
+
+This will install the SBS Apps into the DocArea "SBS". The DocArea is created, if it does not exist.
+
+## Install custom Generic Base Apps (GBA)
+
+If you wish to deploy your custom GBAs, simply copy them to the pool (e.g. in the apps folder):
+
+```
+kubectl cp my-gba-1.0.1000.zip nplus-toolbox-0:/conf/pool/apps
+```
+
+Then, use the GBA file name and version in the DocArea:
+
+```
+application:
+  docAreas:
+    - id: "MyGBA"
+      name: "DocArea with my GBA"
+      description: "This is a sample DocArea with a custom GBA installed"
+      apps:
+      - "/pool/apps/my-gba-1.0.1000.zip"
+```
+
+## Downloading assets from the web, like git
+
+If your assets are in git, you can simply download them prior to installing. That way, you do not have to upload them manually:
+
+```
+application:
+  download:
+    - "https://git.nplus.cloud/public/nplus/raw/branch/master/apps/my-gba-1.0.1000.zip"
+  docAreas:
+    - id: "MyGBA"
+      name: "DocArea with my GBA"
+      description: "This is a sample DocArea with a custom GBA installed"
+      apps:
+      - "/pool/downloads/my-gba-1.0.1000.zip"
+```
+
+> You can also use the *prepper* for downloading assets, which is useful to for example download snippets into the web client before it starts.
+
+## Deploying additional parts
+
+You might want to deploy additional parts like web snippets to your instance. This can by done by custom scripts.
+
+Custom scripts can be run either in *global* or in *document area* context:
+
+```
+application:
+  preRun:
+  - "/pool/scripts/global-init.sh"
+  docAreas:
+    - id: "MyGBA"
+      run:
+      - "/pool/scripts/da-deployment.sh"
+  run:
+  - "/pool/scripts/global-deployment.sh"
+```
+In *DA* context, the script will get the NAPPL information passed to it.
+In *global* context, the script does not get any application specific context.
+
+Example (for a global script):
+
+```
+#/bin/sh
+cp /pool/snippets/test.jar /instance/web/snippets
+```
+
+This script copies the file *test.jar* to the web snippets folder, so the web containers have access to it.
+
+Place this script in the pool folder of your environment, like this:
+
+```
+kubectl cp global-deployment.sh nplus-toolbox-0:/conf/pool/scripts
+```
+
+Then you can run it during the initialization Job like in the example above.
+Of course you also need to copy your snippet to the pool first:
+
+```
+kubectl cp test.jar nplus-toolbox-0:/conf/pool/snippets
+```
+
+Scripts can run Pre- and Post DocArea and App installs:
+
+- The *global preRun* scripts are run **before** any document area initialization.
+- The *DA preRun* scripts are run **before** all apps are installed.
+- The *DA Run* scripts are run **after** all apps are installed.
+- The *global Run* scripts are run **after** any document area initialization.
+
+## Debugging
+
+The Application Chart uses a job that runs a pod once the Application Layer is available. This pod then creates document areas (if not present) and installs apps into them.
+
+While the job is running, you can check its log using
+
+```
+kubectl logs -l nplus/instance=<instance>,nplus/component=application
+```
+
+Please substitute `<instance>` with your instance name.
+
+The job/pod is automatically removed shortly after it finishes, so the `kubectl logs` command might not find the resource any more if you try this after minutes. Of course you will still find these logs in splunk, prometheus, kibana or whatever log stack you use.
+
+Alternatively, you can check the log at `/conf/<instance>/application/10init.log` from inside the environment toolbox.
+
+```
+kubectl exec --stdin --tty nplus-toolbox-0 -- cat /conf/<instance>/application/10init.log
+```
+
+## Wait-One-Minute
+
+If you have an update scenario (and not using argoCD with its waves) and your application is inside your instance, you might get into a race condition problem:
+
+Your Application Layer is still up when the job is created. The jobs waits for the Application Layer, which - since it is still there - is only a split second and then the job executes. Kubernetes might then update the Application Layer which terminates, leaving the job crashing. As the application job only tries to install once, it will be left incomplete.
+
+We use an init container `wait-one-minute`, which will wait a minute before the job executes, leaving Kubernetes and the Application Layer enough time to terminate for the update.
+
+This is the default when **not** using argoCD and waves.
+
+## nplus-application Chart Configuration
+
+You can customize / configure nplus-application by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+docAreas | Provide a list of docareas to create. Please also see the example files |   |
+download | A list of URLs (Links) to Assets to download before anything else if the download is a .tar.gz, it is automatically untared to /pool/downloads |   |
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"application-layer"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |   |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |   |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"application"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/application"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |   |
+**mounts**&#8203;.pool&#8203;.path | Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution <br>do not change this value | **info only**, do not change<br> `"/pool"` |
+**mounts**&#8203;.temp&#8203;.path | Sets the path to the temporary files <br>do not change this value | **info only**, do not change<br> `"/tmp"` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |   |
+nameOverride | This overrides the output of the internal name function |   |
+**nappl**&#8203;.account | The technical account to login with |   |
+**nappl**&#8203;.domain | The domain of the technical account |   |
+**nappl**&#8203;.host | nappl host name |   |
+**nappl**&#8203;.instance | instance of the Application Layer, likely `instance1` |   |
+**nappl**&#8203;.password | The password of the technical accunt (if not set by secret) |   |
+**nappl**&#8203;.port | nappl port (http 8080 or https 8443) |   |
+**nappl**&#8203;.secret | An optional secret that holds the credentials (the keys must be `account` and `password`) |   |
+**nappl**&#8203;.ssl | sets the Advanced Connect to tls |   |
+nodeSelector | select specific nodes for this component |   |
+**nstl**&#8203;.host | The dns of the *nscale Server Storage Layer*. This is used to add it to the nappl configuration |   |
+prerun | A list of scripts to run before the deployment of Apps |   |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**rs**&#8203;.host | The dns of the *nscale rendition Server*. This is used to add it to the nappl configuration |   |
+run | A list of scripts to run after the deployment of Apps |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+
diff --git a/charts/application/templates/NOTES.txt b/charts/application/templates/NOTES.txt
new file mode 100644
index 0000000..9e05608
--- /dev/null
+++ b/charts/application/templates/NOTES.txt
@@ -0,0 +1,14 @@
+{{- if .Values.docAreas }}
+    {{- range $docArea := .Values.docAreas }}
+Created Document Area {{ $docArea.id }} on Server {{ $.this.nappl.host }}
+        {{- if $docArea.apps }}
+            {{- range $app := $docArea.apps }}
+- Installed App {{ $app }} into {{ $docArea.id }}
+            {{- end }}
+        {{- else }}
+- No Apps in Document Area {{ $docArea.id }} specified
+        {{- end }}
+    {{- end }}
+{{- else }}
+No Document Areas specified
+{{- end }}
diff --git a/charts/application/templates/application.tpl b/charts/application/templates/application.tpl
new file mode 100644
index 0000000..0b92e27
--- /dev/null
+++ b/charts/application/templates/application.tpl
@@ -0,0 +1,19 @@
+apiVersion: nplus.cloud/v1beta1
+kind: Application
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.annotations" . | nindent 4 }}
+    argocd.argoproj.io/sync-wave: "1"
+spec:
+  docAreas:
+    {{- toYaml .Values.docAreas | nindent 4 }}
+  run:
+    {{- toYaml .Values.run | nindent 4 }}
+  selector:
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
diff --git a/charts/application/templates/config.tpl b/charts/application/templates/config.tpl
new file mode 100644
index 0000000..18869ce
--- /dev/null
+++ b/charts/application/templates/config.tpl
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ .component.fullName }}-config
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+data:
+{{- range $path, $bytes := .Files.Glob "config/*" }}
+{{- base $path | nindent 2 }}: |
+{{- tpl ($.Files.Get $path) $ | nindent 4 }}
+{{- end }}
diff --git a/charts/application/templates/job.tpl b/charts/application/templates/job.tpl
new file mode 100644
index 0000000..a461c81
--- /dev/null
+++ b/charts/application/templates/job.tpl
@@ -0,0 +1,89 @@
+{{- include "nplus.init" $ -}}
+# Component: {{ .component.chartName }}
+# will connect to:
+{{- if (.this.nappl).host }}
+#   nappl: {{ if ($.this.nappl).ssl -}}https{{- else -}}http{{- end -}}://{{ ($.this.nappl).host }}:{{ (.this.nappl).port }}/{{ (.this.nappl).instance }}
+{{- else }}
+#   defined by config file in conf PV.
+{{- end }}
+#
+{{- if (.this.utils).maintenance -}}
+# Job must not be running, as we are in maintenance mode and there might not even be a nappl service
+{{- else }}
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    argocd.argoproj.io/hook: PostSync
+    argocd.argoproj.io/hook-delete-policy: HookSucceeded
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  # Deletion ist done by Operator when successful, so no ttl necessary.
+  # ttlSecondsAfterFinished: 60
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/version: {{ .Chart.AppVersion }}
+        app.kubernetes.io/managed-by: {{ .Release.Service }}
+        app.kubernetes.io/instance: {{ .instance.group | default .instance.name | default .Release.Name }}
+        app.kubernetes.io/component: {{ .component.chartName }}
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+    spec:
+      # hostname: {{ .component.fullName }}
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+      
+      initContainers:
+
+      {{- if (or .this.utils.disableWave (not (and .component.isArgo .this.meta.wave))) }}
+      {{- include "nplus.waitOneMinute" . | nindent 6 }}
+      {{- else }}
+      # -- wait-one-minute - not waiting as {{ .this.utils.disableWave }} {{ .component.isArgo }} {{ .this.meta.wave }}
+      {{- end }}
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      
+      containers:
+      - name: run
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+        # -- NAPPL Connection Credentials
+          {{- include "nplus.envCredentials" (list
+            "APP_AL_USER"       ($.this.nappl).account
+            "APP_AL_PASSWORD"   ($.this.nappl).password
+                                ($.this.nappl).secret
+          ) | nindent 10 }}
+
+        {{- include "nplus.environment" . | nindent 8 }}
+
+        command: ["/bin/sh", "-c", "/config/run"]
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+        - name: config
+          mountPath: /config
+        - name: conf
+          subPath: {{ .this.instance.name }}
+          mountPath: /instance
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+      - name: config
+        configMap:
+          name: {{ .component.fullName }}-config
+          defaultMode: 0777
+
+      restartPolicy: Never
+  backoffLimit: 0
+{{- end }}
diff --git a/charts/application/templates/networkpolicy.tpl b/charts/application/templates/networkpolicy.tpl
new file mode 100644
index 0000000..4636f1a
--- /dev/null
+++ b/charts/application/templates/networkpolicy.tpl
@@ -0,0 +1,28 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+  policyTypes:
+  - Egress
+  egress:
+  - to:
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: core
+{{- end }}
\ No newline at end of file
diff --git a/charts/application/values.schema.json b/charts/application/values.schema.json
new file mode 100644
index 0000000..bfe1bba
--- /dev/null
+++ b/charts/application/values.schema.json
@@ -0,0 +1,725 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "docAreas": {
+      "default": "",
+      "description": "Provide a list of docareas to create. Please also see the example files",
+      "title": "docAreas"
+    },
+    "download": {
+      "default": "",
+      "description": "A list of URLs (Links) to Assets to download before anything else if the download is a .tar.gz, it is automatically untared to /pool/downloads",
+      "title": "download"
+    },
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "application-layer",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.3.1300.2024121814",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "application",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta",
+      "type": "object"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/application",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "/pool",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "/tmp",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nappl": {
+      "additionalProperties": false,
+      "description": "The nscale Application Layer, this component should talk to",
+      "properties": {
+        "account": {
+          "default": "",
+          "description": "The technical account to login with",
+          "title": "account"
+        },
+        "domain": {
+          "default": "",
+          "description": "The domain of the technical account",
+          "title": "domain"
+        },
+        "host": {
+          "default": "",
+          "description": "nappl host name",
+          "title": "host"
+        },
+        "instance": {
+          "default": "",
+          "description": "instance of the Application Layer, likely `instance1`",
+          "title": "instance"
+        },
+        "password": {
+          "default": "",
+          "description": "The password of the technical accunt (if not set by secret)",
+          "title": "password"
+        },
+        "port": {
+          "default": "",
+          "description": "nappl port (http 8080 or https 8443)",
+          "title": "port"
+        },
+        "secret": {
+          "default": "",
+          "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+          "title": "secret"
+        },
+        "ssl": {
+          "default": "",
+          "description": "sets the Advanced Connect to tls",
+          "title": "ssl"
+        }
+      },
+      "title": "nappl"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "nstl": {
+      "additionalProperties": false,
+      "properties": {
+        "host": {
+          "default": "",
+          "description": "The dns of the *nscale Server Storage Layer*. This is used to add it to the nappl configuration",
+          "title": "host"
+        }
+      },
+      "title": "nstl",
+      "type": "object"
+    },
+    "prerun": {
+      "default": "",
+      "description": "A list of scripts to run before the deployment of Apps",
+      "title": "prerun"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "rs": {
+      "additionalProperties": false,
+      "properties": {
+        "host": {
+          "default": "",
+          "description": "The dns of the *nscale rendition Server*. This is used to add it to the nappl configuration",
+          "title": "host"
+        }
+      },
+      "title": "rs",
+      "type": "object"
+    },
+    "run": {
+      "default": "",
+      "description": "A list of scripts to run after the deployment of Apps",
+      "title": "run"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/application/values.yaml b/charts/application/values.yaml
new file mode 100644
index 0000000..2ea1f09
--- /dev/null
+++ b/charts/application/values.yaml
@@ -0,0 +1,338 @@
+# yaml-language-server: $schema=values.schema.json
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: application
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http:
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https:
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language:
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer:
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+mounts:
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/application"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path: "/pool"
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path: "/tmp"
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the temporary disk (all paths)
+    size:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size:
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path:
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+  file:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- The nscale Application Layer, this component should talk to
+nappl:
+  # -- nappl host name
+  host:
+  # -- nappl port (http 8080 or https 8443)
+  port:
+  # -- sets the Advanced Connect to tls
+  ssl:
+  # -- instance of the Application Layer, likely `instance1`
+  instance:
+  # -- The technical account to login with
+  account:
+  # -- The domain of the technical account
+  domain:
+  # -- The password of the technical accunt (if not set by secret)
+  password:
+  # -- An optional secret that holds the credentials (the keys must be `account` and `password`)
+  secret:
+nstl:
+  # -- The dns of the *nscale Server Storage Layer*. This is used to add it to the nappl configuration
+  host:
+rs:
+  # -- The dns of the *nscale rendition Server*. This is used to add it to the nappl configuration
+  host:
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: application-layer
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+# -- A list of scripts to run after the deployment of Apps
+run:
+# -- A list of scripts to run before the deployment of Apps
+prerun:
+# -- A list of URLs (Links) to Assets to download before anything else
+# if the download is a .tar.gz, it is automatically untared to /pool/downloads
+download:
+# -- Provide a list of docareas to create. Please also see the example files
+docAreas:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/cluster/Chart.yaml b/charts/cluster/Chart.yaml
new file mode 100644
index 0000000..96416b0
--- /dev/null
+++ b/charts/cluster/Chart.yaml
@@ -0,0 +1,6 @@
+apiVersion: v2
+name: nplus-cluster
+description: Installs Cluster-Wide Resources such as CRDs
+icon: data:image/svg+xml;base64,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
+type: application
+version: 1.0.0
diff --git a/charts/cluster/README.md b/charts/cluster/README.md
new file mode 100644
index 0000000..cf3a8c8
--- /dev/null
+++ b/charts/cluster/README.md
@@ -0,0 +1,6 @@
+
+
+# nplus-cluster
+
+Installs Cluster-Wide Resources such as CRDs
+
diff --git a/charts/cluster/templates/controller-rbac.tpl b/charts/cluster/templates/controller-rbac.tpl
new file mode 100755
index 0000000..2294e5c
--- /dev/null
+++ b/charts/cluster/templates/controller-rbac.tpl
@@ -0,0 +1,81 @@
+{{/*
+
+#
+# Dieses ist erstmal ausgeschaltet, vielleicht brauchen wir das mal in einer späteren Version
+#
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: nplus-role-argo
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+rules:
+  - apiGroups: ["argoproj.io"]
+    resources: ["applications"]
+    verbs: ["create", "get", "update", "patch", "delete", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: nplus-role-binding-argo
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: nplus-role-argo
+subjects:
+- kind: ServiceAccount
+  name: nplus-svc-account
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: nplus-argo-role
+  namespace: argocd
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+rules:
+  - apiGroups: [""]
+    resources: ["configmaps", "application","applicationset"]
+    verbs: ["create", "get", "update", "patch", "delete", "list", "watch"]
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: nplus-argo-role-binding
+  namespace: argocd
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: nplus-argo-role
+subjects:
+- kind: ServiceAccount
+  name: nplus-svc-account
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+
+*/}}
\ No newline at end of file
diff --git a/charts/cluster/templates/crd-application.tpl b/charts/cluster/templates/crd-application.tpl
new file mode 100644
index 0000000..d57cf5f
--- /dev/null
+++ b/charts/cluster/templates/crd-application.tpl
@@ -0,0 +1,54 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: applications.nplus.cloud
+spec:
+  group: nplus.cloud
+  scope: Namespaced
+  names:
+    kind: Application
+    singular: application
+    plural: applications
+    categories:
+    - nplus
+    - nscale
+  versions:
+  - name: v1beta1
+    served: true
+    storage: true
+    additionalPrinterColumns:
+      - name: Environment
+        type: string
+        jsonPath: .metadata.labels.nplus/environment
+        priority: 1
+      - name: Instance
+        type: string
+        jsonPath: .metadata.labels.nplus/instance
+      - name: Application
+        type: string
+        jsonPath: .metadata.labels.nplus/component
+      - name: Version
+        type: string
+        jsonPath: .metadata.annotations.nplus/componentVersion
+      - name: Status
+        type: string
+        jsonPath: .status.message
+    schema:
+      openAPIV3Schema:
+        type: object
+        properties:
+          spec:
+            type: object
+            x-kubernetes-preserve-unknown-fields: true
+          status:
+            type: object
+            properties:
+              message:
+                description: Health human readable
+                type: string
+              id:
+                description: Health status id
+                type: integer
+              updateTimestamp:
+                description: Timestamp of last Health Change
+                type: string
diff --git a/charts/cluster/templates/crd-component.tpl b/charts/cluster/templates/crd-component.tpl
new file mode 100644
index 0000000..5d65e63
--- /dev/null
+++ b/charts/cluster/templates/crd-component.tpl
@@ -0,0 +1,57 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: components.nplus.cloud
+spec:
+  group: nplus.cloud
+  scope: Namespaced
+  names:
+    kind: Component
+    singular: component
+    plural: components
+    categories:
+    - nplus
+    - nscale
+  versions:
+  - name: v1beta1
+    served: true
+    storage: true
+    additionalPrinterColumns:
+      - name: Environment
+        type: string
+        jsonPath: .metadata.labels.nplus/environment
+        priority: 1
+      - name: Instance
+        type: string
+        jsonPath: .metadata.labels.nplus/instance
+      - name: Component
+        type: string
+        jsonPath: .metadata.labels.nplus/component
+      - name: Type
+        type: string
+        jsonPath: .metadata.labels.nplus/type
+      - name: Version
+        type: string
+        jsonPath: .metadata.annotations.nplus/componentVersion
+      - name: Status
+        type: string
+        jsonPath: .status.message
+    schema:
+      openAPIV3Schema:
+        type: object
+        properties:
+          spec:
+            type: object
+            x-kubernetes-preserve-unknown-fields: true
+          status:
+            type: object
+            properties:
+              message:
+                description: Health human readable
+                type: string
+              id:
+                description: Health status id
+                type: integer
+              updateTimestamp:
+                description: Timestamp of last Health Change
+                type: string
diff --git a/charts/cluster/templates/crd-instance.tpl b/charts/cluster/templates/crd-instance.tpl
new file mode 100644
index 0000000..09da36c
--- /dev/null
+++ b/charts/cluster/templates/crd-instance.tpl
@@ -0,0 +1,92 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: instances.nplus.cloud
+spec:
+  group: nplus.cloud
+  scope: Namespaced
+  names:
+    kind: Instance
+    singular: instance
+    plural: instances
+    categories:
+    - nplus
+    - nscale
+  versions:
+  - name: v1beta1
+    served: true
+    storage: true
+    additionalPrinterColumns:
+      - name: Handler
+        type: string
+        jsonPath: .spec.handler
+      - name: Version
+        type: string
+        jsonPath: .spec.nscaleVersion
+      - name: Tenant
+        type: string
+        jsonPath: .spec.tenant
+      - name: Provider
+        type: string
+        jsonPath: .spec.provider
+        priority: 1
+      - name: Status
+        type: string
+        jsonPath: .status.message
+      - name: Components
+        type: string
+        jsonPath: .spec.components
+        priority: 2
+    schema:
+      openAPIV3Schema:
+        type: object
+        properties:
+          spec:
+            type: object
+            # x-kubernetes-preserve-unknown-fields: true
+            properties:
+              nscaleVersion:
+                type: string
+              components:
+                type: string
+              handler:
+                type: string
+              tenant:
+                type: string
+              provider:
+                type: string
+              url:
+                type: string
+              expected:
+                type: array
+                items:
+                  type: object
+                  properties:
+                    component:
+                      type: string
+                    replicaCount:
+                      type: integer
+                  required:
+                  - component
+                  - replicaCount
+          status:
+            type: object
+            properties:
+              usage:
+                type: object
+                properties:
+                  volume:
+                    type: integer
+                  accounts:
+                    type: integer
+                  documents:
+                    type: integer
+              message:
+                description: Health human readable
+                type: string
+              id:
+                description: Health status id
+                type: integer
+              updateTimestamp:
+                description: Timestamp of last Health Change
+                type: string
diff --git a/charts/cluster/values.schema.json b/charts/cluster/values.schema.json
new file mode 100644
index 0000000..0ea65f8
--- /dev/null
+++ b/charts/cluster/values.schema.json
@@ -0,0 +1,12 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/cluster/values.yaml b/charts/cluster/values.yaml
new file mode 100644
index 0000000..b2b7dd8
--- /dev/null
+++ b/charts/cluster/values.yaml
@@ -0,0 +1,2 @@
+# yaml-language-server: $schema=values.schema.json
+{}
diff --git a/charts/cmis/Chart.yaml b/charts/cmis/Chart.yaml
new file mode 100644
index 0000000..fbe444b
--- /dev/null
+++ b/charts/cmis/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-cmis
+description: nscale CMIS Connector, provides a CMIS Interface to the Instance
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/cmis/README.md b/charts/cmis/README.md
new file mode 100644
index 0000000..88bb746
--- /dev/null
+++ b/charts/cmis/README.md
@@ -0,0 +1,179 @@
+
+
+# nplus-component-cmis
+
+nscale CMIS Connector, provides a CMIS Interface to the Instance
+
+## nplus-component-cmis Chart Configuration
+
+You can customize / configure nplus-component-cmis by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"cmis-connector"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/cmis"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**javaOpts**&#8203;.javaMaxMem | set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed |   |
+**javaOpts**&#8203;.javaMaxRamPercentage | set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any. |   |
+**javaOpts**&#8203;.javaMinMem | set the minimum memory, java will consume |   |
+**javaOpts**&#8203;.javaMisc | Any misc Java Options that need to be passed to the container |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"java"` |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8096` |
+**meta**&#8203;.ports&#8203;.https | The tls / https port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8196` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"cmis-connector"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"cmis"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCount | if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas. |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-cmis-connector/conf"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.logs&#8203;.path | Sets the path to the log files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-cmis-connector/logs"` |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |  `"1Gi"` |
+**mounts**&#8203;.temp&#8203;.path | Sets the path to the temporary files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-cmis-connector/temp"` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"1Gi"` |
+nameOverride | This overrides the output of the internal name function |   |
+**nappl**&#8203;.account | The technical account to login with |   |
+**nappl**&#8203;.domain | The domain of the technical account |   |
+**nappl**&#8203;.host | nappl host name |   |
+**nappl**&#8203;.instance | instance of the Application Layer, likely `instance1` |   |
+**nappl**&#8203;.password | The password of the technical accunt (if not set by secret) |   |
+**nappl**&#8203;.port | nappl port (http 8080 or https 8443) |   |
+**nappl**&#8203;.secret | An optional secret that holds the credentials (the keys must be `account` and `password`) |   |
+**nappl**&#8203;.ssl | sets the Advanced Connect to tls |   |
+nodeSelector | select specific nodes for this component |   |
+replicaCount | Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1. |  `1` |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+updateStrategy | the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures. |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+
diff --git a/charts/cmis/templates/component.tpl b/charts/cmis/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/cmis/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/cmis/templates/deployment.tpl b/charts/cmis/templates/deployment.tpl
new file mode 100644
index 0000000..21ed456
--- /dev/null
+++ b/charts/cmis/templates/deployment.tpl
@@ -0,0 +1,100 @@
+{{- include "nplus.init" $ -}}
+# Component: {{ .component.chartName }}
+# will connect to:
+{{- if (.this.nappl).host }}
+#   nappl: {{ if ($.this.nappl).ssl -}}https{{- else -}}http{{- end -}}://{{ ($.this.nappl).host }}:{{ (.this.nappl).port }}/{{ (.this.nappl).instance }}
+{{- else }}
+#   defined by config file in conf PV.
+{{- end }}
+#
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+
+spec:
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: {{ .Values.replicaCount }}
+  strategy:
+    type: RollingUpdate
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.templateAffinity" . | nindent 6 }}
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+
+      containers:
+      - name: cmis-connector
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+        # -- NAPPL Connection Settings
+          {{- include "nplus.env" (dict 
+            "CMIS_AL_HOST"         ($.this.nappl).host
+            "CMIS_AL_PORT"         ($.this.nappl).port
+            "CMIS_AL_INSTANCE"     ($.this.nappl).instance
+            "CMIS_AL_SSL"          ($.this.nappl).ssl
+          ) | nindent 10 }}
+
+        {{- include "nplus.environment" . | nindent 8 }}
+
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+        startupProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          initialDelaySeconds: 10
+          failureThreshold: 12
+          periodSeconds: 10
+          timeoutSeconds: 5
+        # -- Ceyoniq does currently not define an *official* livenessProbe, so we use
+        # one that quickly checks the main socket on Layer 4.
+        livenessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          periodSeconds: 10
+        readinessProbe:
+          httpGet:
+            path: /cmis/
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          periodSeconds: 10
+        {{- end }}
+
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+
diff --git a/charts/cmis/templates/ingress.tpl b/charts/cmis/templates/ingress.tpl
new file mode 100644
index 0000000..293d27f
--- /dev/null
+++ b/charts/cmis/templates/ingress.tpl
@@ -0,0 +1,16 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/cmis/templates/networkpolicy.tpl b/charts/cmis/templates/networkpolicy.tpl
new file mode 100644
index 0000000..c414672
--- /dev/null
+++ b/charts/cmis/templates/networkpolicy.tpl
@@ -0,0 +1,35 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+  policyTypes:
+  - Ingress
+  - Egress
+  ingress:
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+
+
+  {{- include "nplus.networkpolicy.allowFromAdmin" . | nindent 2 }}
+
+  {{- include "nplus.networkpolicy.allowFromMon" . | nindent 2 }}
+
+  egress:
+  {{- include "nplus.networkpolicy.allowToNappl" . | nindent 2 }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/cmis/templates/pdb.tpl b/charts/cmis/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/cmis/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/cmis/templates/pvc.tpl b/charts/cmis/templates/pvc.tpl
new file mode 100644
index 0000000..b79132a
--- /dev/null
+++ b/charts/cmis/templates/pvc.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.pvc" . }}
diff --git a/charts/cmis/templates/service.tpl b/charts/cmis/templates/service.tpl
new file mode 100644
index 0000000..f75d409
--- /dev/null
+++ b/charts/cmis/templates/service.tpl
@@ -0,0 +1,33 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service,
+  # access is purely through an ingress if desired.
+  type: ClusterIP
+  clusterIP: None
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
+
diff --git a/charts/cmis/values.schema.json b/charts/cmis/values.schema.json
new file mode 100644
index 0000000..cbc81eb
--- /dev/null
+++ b/charts/cmis/values.schema.json
@@ -0,0 +1,844 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "cmis-connector",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullPolicy": {
+          "default": "IfNotPresent",
+          "title": "pullPolicy",
+          "type": "string"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.3.1200.2024112508",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/cmis",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "javaOpts": {
+      "additionalProperties": false,
+      "description": "Options for the Java VM",
+      "properties": {
+        "javaMaxMem": {
+          "default": "",
+          "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+          "title": "javaMaxMem"
+        },
+        "javaMaxRamPercentage": {
+          "default": "",
+          "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+          "title": "javaMaxRamPercentage"
+        },
+        "javaMinMem": {
+          "default": "",
+          "description": "set the minimum memory, java will consume",
+          "title": "javaMinMem"
+        },
+        "javaMisc": {
+          "default": "",
+          "description": "Any misc Java Options that need to be passed to the container",
+          "title": "javaMisc"
+        }
+      },
+      "title": "javaOpts"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "description": "defines internal constants for nplus. do not change these values",
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "java",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8096",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "8196",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "cmis-connector",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "cmis",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta"
+    },
+    "minReplicaCount": {
+      "default": "",
+      "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+      "title": "minReplicaCount"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-cmis-connector/conf",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-cmis-connector/logs",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-cmis-connector/temp",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nappl": {
+      "additionalProperties": false,
+      "description": "The nscale Application Layer, this component should talk to",
+      "properties": {
+        "account": {
+          "default": "",
+          "description": "The technical account to login with",
+          "title": "account"
+        },
+        "domain": {
+          "default": "",
+          "description": "The domain of the technical account",
+          "title": "domain"
+        },
+        "host": {
+          "default": "",
+          "description": "nappl host name",
+          "title": "host"
+        },
+        "instance": {
+          "default": "",
+          "description": "instance of the Application Layer, likely `instance1`",
+          "title": "instance"
+        },
+        "password": {
+          "default": "",
+          "description": "The password of the technical accunt (if not set by secret)",
+          "title": "password"
+        },
+        "port": {
+          "default": "",
+          "description": "nappl port (http 8080 or https 8443)",
+          "title": "port"
+        },
+        "secret": {
+          "default": "",
+          "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+          "title": "secret"
+        },
+        "ssl": {
+          "default": "",
+          "description": "sets the Advanced Connect to tls",
+          "title": "ssl"
+        }
+      },
+      "title": "nappl"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "updateStrategy": {
+      "default": "",
+      "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+      "title": "updateStrategy"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/cmis/values.yaml b/charts/cmis/values.yaml
new file mode 100644
index 0000000..8d345f4
--- /dev/null
+++ b/charts/cmis/values.yaml
@@ -0,0 +1,423 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: true
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/cmis"
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# -- Sets the number of replicas in this replicaSet.
+# Some Components (like nstl or sharepoint) only allow a count of 1.
+replicaCount: 1
+# -- the update Strategy for this component. Normally, you can update all components
+# rolling, except for nappl, where you need to follow the documented update procedures.
+updateStrategy:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-cmis-connector/temp"
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the temporary disk (all paths)
+    size: "1Gi"
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-cmis-connector/conf"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-cmis-connector/logs"
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size: "1Gi"
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path:
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+  file:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- Options for the Java VM
+javaOpts:
+  # -- set the percentage of RAM, Java will use of the total.
+  # The total amount is the amount installed in the K8s Cluster Node,
+  # OR the Memory Limit set (see resources), if any.
+  javaMaxRamPercentage:
+  # -- set the minimum memory, java will consume
+  javaMinMem:
+  # -- set the maximum memory, java will consume.
+  # Attention: This is NOT the real maximum and it does not include any non Java memory.
+  # Please read google, as this is highly discussed
+  javaMaxMem:
+  # -- Any misc Java Options that need to be passed to the container
+  javaMisc:
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: cmis-connector
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+  pullPolicy: IfNotPresent
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- defines internal constants for nplus.
+# do not change these values
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: cmis
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8096
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https: 8196
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: java
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: cmis-connector
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- The nscale Application Layer, this component should talk to
+nappl:
+  # -- nappl host name
+  host:
+  # -- nappl port (http 8080 or https 8443)
+  port:
+  # -- sets the Advanced Connect to tls
+  ssl:
+  # -- instance of the Application Layer, likely `instance1`
+  instance:
+  # -- The technical account to login with
+  account:
+  # -- The domain of the technical account
+  domain:
+  # -- The password of the technical accunt (if not set by secret)
+  password:
+  # -- An optional secret that holds the credentials (the keys must be `account` and `password`)
+  secret:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCount, a podDesruptionBudget will be created with this value as
+# minAvailable, using the full component as selector. This is useful for components, that are
+# using multiple replicas.
+minReplicaCount:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/database/Chart.yaml b/charts/database/Chart.yaml
new file mode 100644
index 0000000..0be31d3
--- /dev/null
+++ b/charts/database/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-database
+description: Postgres Database, deploys a DEV or TESTING environment DB
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/database/README.md b/charts/database/README.md
new file mode 100644
index 0000000..5de4fb7
--- /dev/null
+++ b/charts/database/README.md
@@ -0,0 +1,160 @@
+
+
+# nplus-component-database
+
+Postgres Database, deploys a DEV or TESTING environment DB
+
+## nplus-component-database Chart Configuration
+
+You can customize / configure nplus-component-database by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+**database**&#8203;.account | the technical account to own the nscale database, if not set by secret |  `"nscale"` |
+**database**&#8203;.name | name of the nscale database |  `"nscale"` |
+**database**&#8203;.password | password of the technical account, if not set by secret |  `"nscale"` |
+**database**&#8203;.secret | the secret with credentials (account, password) for the nscale technical account. This setting has priority over account and password |   |
+**dbAdmin**&#8203;.account | the database admin account, if not set by secret |  `"postgres"` |
+**dbAdmin**&#8203;.password | the database admin password, if not set by secret |  `"postgres"` |
+**dbAdmin**&#8203;.secret | the secret with credentials (account, password) for the database admin account. This setting has priority over adminAccount and adminPassword |   |
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"bitnami/postgresql"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |   |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |   |
+**image**&#8203;.tag | the tag of the image to use |  `15` |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |   |
+**meta**&#8203;.ports&#8203;.tcp | A potential tcp port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `5432` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |   |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"database"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/bitnami/postgresql/conf"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.paths | Sets a list of paths to the data files <br>do not change this value | **info only**, do not change<br> `["/bitnami/postgresql"]` |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |  `"30Gi"` |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |   |
+**mounts**&#8203;.temp&#8203;.paths | Sets a list of paths to the temporary files <br>do not change this value | **info only**, do not change<br> `["/tmp", "/opt/bitnami/postgresql/tmp"]` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"1Gi"` |
+nameOverride | This overrides the output of the internal name function |   |
+nodeSelector | select specific nodes for this component |   |
+**priority**&#8203;.className | Set the priority class for the Application Layer deployment if desired |   |
+**priority**&#8203;.createClass | Creates an individual PriorityClass for this instance |   |
+**priority**&#8203;.value | Sets the priorityValue |  1000000 |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+
diff --git a/charts/database/templates/component.tpl b/charts/database/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/database/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/database/templates/config.tpl b/charts/database/templates/config.tpl
new file mode 100644
index 0000000..5048c2c
--- /dev/null
+++ b/charts/database/templates/config.tpl
@@ -0,0 +1,16 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ .component.fullName }}-config
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+data:
+{{ (.Files.Glob "config/*").AsConfig | indent 2 }}
diff --git a/charts/database/templates/networkpolicy.tpl b/charts/database/templates/networkpolicy.tpl
new file mode 100644
index 0000000..c13d6f6
--- /dev/null
+++ b/charts/database/templates/networkpolicy.tpl
@@ -0,0 +1,33 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  policyTypes:
+  - Ingress
+  ingress:
+  - from:
+    # Allow access from NAPPL Cores
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: core
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/database/templates/pdb.tpl b/charts/database/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/database/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/database/templates/priorityClass.tpl b/charts/database/templates/priorityClass.tpl
new file mode 100644
index 0000000..ecd4280
--- /dev/null
+++ b/charts/database/templates/priorityClass.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.priorityClass" . }}
diff --git a/charts/database/templates/pvc.tpl b/charts/database/templates/pvc.tpl
new file mode 100644
index 0000000..b79132a
--- /dev/null
+++ b/charts/database/templates/pvc.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.pvc" . }}
diff --git a/charts/database/templates/service.tpl b/charts/database/templates/service.tpl
new file mode 100644
index 0000000..79f3bd8
--- /dev/null
+++ b/charts/database/templates/service.tpl
@@ -0,0 +1,28 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+   
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
+
diff --git a/charts/database/templates/statefulset.tpl b/charts/database/templates/statefulset.tpl
new file mode 100644
index 0000000..649e84a
--- /dev/null
+++ b/charts/database/templates/statefulset.tpl
@@ -0,0 +1,119 @@
+{{- include "nplus.init" $ -}}
+# Component: {{ .component.chartName }}
+#
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  serviceName: {{ .component.fullName }}
+  replicas: {{ .Values.replicaCount }}
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  podManagementPolicy: OrderedReady
+  updateStrategy:
+      type: OnDelete
+  minReadySeconds: 10
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.priorityClassName" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.templateAffinity" . | nindent 6 }}
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+
+      initContainers:
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+
+      containers:
+      - name: postgres
+        image: {{ include "nplus.image" (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        {{- include "nplus.resources" . | nindent 8 }}
+          
+        env:
+
+        # -- POSTGRES Admin Credentials
+          {{- include "nplus.envCredentials" (list
+            "POSTGRES_USERNAME"   ($.this.dbAdmin).account
+            "POSTGRES_PASSWORD"   ($.this.dbAdmin).password
+                                  ($.this.dbAdmin).secret
+          ) | nindent 10 }}
+
+        # -- NAPPL Postgres Connection Credentials
+          {{- include "nplus.envCredentials" (list
+            "NSCALE_USERNAME"   ($.this.database).account
+            "NSCALE_PASSWORD"   ($.this.database).password
+                                ($.this.database).secret
+          ) | nindent 10 }}
+
+          - name: NSCALE_DATABASE
+            value: {{ (.this.database).name }}
+
+        {{- include "nplus.environment" . | nindent 8 }}
+
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+        startupProbe:
+          initialDelaySeconds: 10
+          failureThreshold: 12
+          periodSeconds: 10
+          timeoutSeconds: 5
+          exec:
+            command:
+            - sh
+            - -c
+            - exec pg_isready -U "postgres" -h 127.0.0.1 -p {{ required "Postgres Port must be set" ((.this.meta).ports).tcp }}
+        livenessProbe:
+          exec:
+            command:
+            - sh
+            - -c
+            - exec pg_isready -U "postgres" -h 127.0.0.1 -p {{ required "Postgres Port must be set" ((.this.meta).ports).tcp }}
+          periodSeconds: 30
+          timeoutSeconds: 5
+          successThreshold: 1
+          failureThreshold: 6
+        readinessProbe:
+          exec:
+            command:
+            - sh
+            - -c
+            - |
+              pg_isready -U "postgres" -h 127.0.0.1 -p 5432 -t 1
+              [ -f /opt/bitnami/postgresql/tmp/.initialized ]
+        {{- end }}
+        volumeMounts:
+        # Postgres requires this directory to be **completely** empty,
+        # so also no lost&found directory.
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+        - name: custom-init-scripts
+          mountPath: /docker-entrypoint-initdb.d/
+      volumes:
+      - name: custom-init-scripts
+        configMap:
+          name: {{ .component.fullName }}-config
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
diff --git a/charts/database/values.schema.json b/charts/database/values.schema.json
new file mode 100644
index 0000000..57dcc2f
--- /dev/null
+++ b/charts/database/values.schema.json
@@ -0,0 +1,750 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "database": {
+      "additionalProperties": false,
+      "properties": {
+        "account": {
+          "default": "nscale",
+          "description": "the technical account to own the nscale database, if not set by secret",
+          "title": "account"
+        },
+        "name": {
+          "default": "nscale",
+          "description": "name of the nscale database",
+          "title": "name"
+        },
+        "password": {
+          "default": "nscale",
+          "description": "password of the technical account, if not set by secret",
+          "title": "password"
+        },
+        "secret": {
+          "default": "",
+          "description": "the secret with credentials (account, password) for the nscale technical account. This setting has priority over account and password",
+          "title": "secret"
+        }
+      },
+      "title": "database",
+      "type": "object"
+    },
+    "dbAdmin": {
+      "additionalProperties": false,
+      "properties": {
+        "account": {
+          "default": "postgres",
+          "description": "the database admin account, if not set by secret",
+          "title": "account"
+        },
+        "password": {
+          "default": "postgres",
+          "description": "the database admin password, if not set by secret",
+          "title": "password"
+        },
+        "secret": {
+          "default": "",
+          "description": "the secret with credentials (account, password) for the database admin account. This setting has priority over adminAccount and adminPassword",
+          "title": "secret"
+        }
+      },
+      "title": "dbAdmin",
+      "type": "object"
+    },
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "bitnami/postgresql",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullSecrets": {
+          "default": "",
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "15",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "5432",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "database",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta",
+      "type": "object"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/bitnami/postgresql/conf",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "30Gi",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "priority": {
+      "additionalProperties": false,
+      "description": "You can give a component a specific priorityClass to implement a quality of service. You can leave this empty, then no priority is set. If you set a class, this class is taken If you additionally enable create, the class is created for you with the value defined.",
+      "properties": {
+        "className": {
+          "default": "",
+          "description": "Set the priority class for the Application Layer deployment if desired",
+          "title": "className"
+        },
+        "createClass": {
+          "default": "",
+          "description": "Creates an individual PriorityClass for this instance",
+          "title": "createClass"
+        },
+        "value": {
+          "default": "1000000",
+          "description": "Sets the priorityValue",
+          "title": "value"
+        }
+      },
+      "title": "priority"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "The replicaCount for the Database should never be changed @ignore",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/database/values.yaml b/charts/database/values.yaml
new file mode 100644
index 0000000..bb6e4e5
--- /dev/null
+++ b/charts/database/values.yaml
@@ -0,0 +1,354 @@
+# yaml-language-server: $schema=values.schema.json
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: database
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp: 5432
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http:
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language:
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer:
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- The replicaCount for the Database should never be changed
+# @ignore
+replicaCount: 1
+mounts:
+  data:
+    # -- Sets the size of the data disk
+    size: "30Gi"
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+      - "/bitnami/postgresql"
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/opt/bitnami/postgresql/conf"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the size of the temporary disk (all paths)
+    size: "1Gi"
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+      - "/tmp"
+      - "/opt/bitnami/postgresql/tmp"
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size:
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path:
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  file:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+database:
+  # -- name of the nscale database
+  name: nscale
+  # -- the technical account to own the nscale database, if not set by secret
+  account: nscale
+  # -- password of the technical account, if not set by secret
+  password: nscale
+  # -- the secret with credentials (account, password) for the nscale technical account.
+  # This setting has priority over account and password
+  secret:
+dbAdmin:
+  # -- the database admin account, if not set by secret
+  account: "postgres"
+  # -- the database admin password, if not set by secret
+  password: "postgres"
+  # -- the secret with credentials (account, password) for the database admin account.
+  # This setting has priority over adminAccount and adminPassword
+  secret:
+# -- provide the image to be used for this component
+image:
+  # -- the name of the image to use
+  name: bitnami/postgresql
+  # -- the tag of the image to use
+  tag: 15
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+  # -- if you use a private repo, feel free to set it here
+  repo:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+# -- You can give a component a specific priorityClass to implement a quality of service.
+# You can leave this empty, then no priority is set. If you set a class, this class is taken
+# If you additionally enable create, the class is created for you with the value defined.
+priority:
+  # -- Set the priority class for the Application Layer deployment if desired
+  className:
+  # -- Creates an individual PriorityClass for this instance
+  createClass:
+  # -- Sets the priorityValue
+  # @default -- 1000000
+  value:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/envbackend/Chart.yaml b/charts/envbackend/Chart.yaml
new file mode 100644
index 0000000..83ee43a
--- /dev/null
+++ b/charts/envbackend/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-environment-backend
+description: Installs Namespace-Wide Resources such as the conf PVC and the ptemp PVC
+icon: data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4KPHN2ZyB2ZXJzaW9uPSIxLjEiIGlkPSJFYmVuZV8xIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB4PSIwcHgiIHk9IjBweCIKCSB2aWV3Qm94PSIwIDAgNTEuMDI0IDUxLjAyNCIgZW5hYmxlLWJhY2tncm91bmQ9Im5ldyAwIDAgNTEuMDI0IDUxLjAyNCIgeG1sOnNwYWNlPSJwcmVzZXJ2ZSI+CjxnPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIzMi4zMjIsMTkuNzQ0IDIwLjY0OSwxOS43NDQgMTguNTkxLDMxLjQxNyAzMC4yNjQsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iNDcuMTg1LDE5Ljc0NCAzNS41MTIsMTkuNzQ0IDMzLjQ1NCwzMS40MTcgNDUuMTI2LDMxLjQxNyAJIi8+Cgk8cG9seWdvbiBmaWxsPSIjQTRCRkU0IiBwb2ludHM9IjI5Ljc2NiwzNC41NTEgMTguMDk0LDM0LjU1MSAxNi4wMzUsNDYuMjI0IDI3LjcwOCw0Ni4yMjQgCSIvPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIxNy41NywxOS43NDQgNS44OTcsMTkuNzQ0IDMuODM5LDMxLjQxNyAxNS41MTIsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iMzUuMTUsNC43OTkgMjMuNDc3LDQuNzk5IDIxLjQxOSwxNi40NzIgMzMuMDkyLDE2LjQ3MiAJIi8+Cjwvc3ZnPgo=
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/envbackend/README.md b/charts/envbackend/README.md
new file mode 100644
index 0000000..cae1194
--- /dev/null
+++ b/charts/envbackend/README.md
@@ -0,0 +1,115 @@
+
+
+# nplus-environment-backend
+
+Installs Namespace-Wide Resources such as the conf PVC and the ptemp PVC
+
+## nplus-environment-backend Chart Configuration
+
+You can customize / configure nplus-environment-backend by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |   |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |   |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |   |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+nameOverride | This overrides the output of the internal name function |   |
+nodeSelector | select specific nodes for this component |   |
+**storage**&#8203;.conf&#8203;.name | this is the name of the common config storage. please see section "Storage" for more information |   |
+**storage**&#8203;.conf&#8203;.size | this is the size of the common config storage. please see section "Storage" for more information |   |
+**storage**&#8203;.conf&#8203;.volumeName | you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner |   |
+**storage**&#8203;.ptemp&#8203;.name | this is the name of the common persistant temp storage. please see section "Storage" for more information |   |
+**storage**&#8203;.ptemp&#8203;.size | this is the size of the common ptemp storage. please see section "Storage" for more information |   |
+**storage**&#8203;.ptemp&#8203;.volumeName | you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner |   |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+
diff --git a/charts/envbackend/templates/pvc-conf.tpl b/charts/envbackend/templates/pvc-conf.tpl
new file mode 100644
index 0000000..e8755d4
--- /dev/null
+++ b/charts/envbackend/templates/pvc-conf.tpl
@@ -0,0 +1,43 @@
+{{- include "nplus.init" $ -}}
+# The "conf" PVC is used to store all config data of the nplus components.
+# You may want to use a git repo on this conf store
+
+{{- if ((.this.storage).conf).name }}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ required "You have to define a name for the conf PVC" ((.this.storage).conf).name }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.environmentLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+
+spec:
+  {{- if ((.this.storage).conf).volumeName }}
+  # -- You have set storage.conf.volumeName,
+  # so we add the volumeName here to avoid automatic
+  # volume generation and rather use an existing volume
+  # to bind to this PVC.
+  volumeName: {{ tpl .this.storage.conf.volumeName . }}
+  # -- set an empty string must be explicitly set otherwise default StorageClass will be set
+  # see https://kubernetes.io/docs/concepts/storage/persistent-volumes/
+  storageClassName: ""
+  {{- else }}
+  # -- volumeName: storage.conf.volumeName
+  # If you set the volumeName, it appears here. You
+  # have not done so, so the provisioner for this
+  # volume class will pick up this claim and fulfill it.
+  {{- $scn := ((.this.storage).conf).class }}
+  {{- if $scn }}
+  storageClassName: {{ $scn | quote }}
+  {{- end }}
+  {{- end }}
+  accessModes:
+  - ReadWriteMany
+  resources:
+    requests:
+      storage: {{ required "You have to define a size for the conf PVC" ((.this.storage).conf).size }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/envbackend/templates/pvc-ptemp.tpl b/charts/envbackend/templates/pvc-ptemp.tpl
new file mode 100644
index 0000000..293b4ab
--- /dev/null
+++ b/charts/envbackend/templates/pvc-ptemp.tpl
@@ -0,0 +1,44 @@
+{{- include "nplus.init" $ -}}
+# The "ptemp" PVC is used to persist temporary data of the nplus components.
+# This is used e.g. in nstl, to store accounting.log info to make sure it is not deleted
+# during a PODs recreate
+
+{{- if ((.this.storage).ptemp).name }}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ required "You have to define a name for the ptemp PVC" ((.this.storage).ptemp).name }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.environmentLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+
+spec:
+  {{- if ((.this.storage).ptemp).volumeName }}
+  # -- You have set storage.ptemp.volumeName,
+  # so we add the volumeName here to avoid automatic
+  # volume generation and rather use an existing volume
+  # to bind to this PVC.
+  volumeName: {{ tpl .this.storage.ptemp.volumeName . }}
+  # -- set an empty string must be explicitly set otherwise default StorageClass will be set
+  # see https://kubernetes.io/docs/concepts/storage/persistent-volumes/
+  storageClassName: ""
+  {{- else }}
+  # -- volumeName: storage.ptemp.volumeName
+  # If you set the volumeName, it appears here. You
+  # have not done so, so the provisioner for this
+  # volume class will pick up this claim and fulfill it.
+  {{- $scn := ((.this.storage).ptemp).class }}
+  {{- if $scn }}
+  storageClassName: {{ $scn | quote }}
+  {{- end }}
+  {{- end }}
+  accessModes:
+  - ReadWriteMany
+  resources:
+    requests:
+      storage: {{ required "You have to define a size for the ptemp PVC" ((.this.storage).ptemp).size }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/envbackend/values.schema.json b/charts/envbackend/values.schema.json
new file mode 100644
index 0000000..11e44c6
--- /dev/null
+++ b/charts/envbackend/values.schema.json
@@ -0,0 +1,258 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta",
+      "type": "object"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "storage": {
+      "additionalProperties": false,
+      "properties": {
+        "conf": {
+          "additionalProperties": false,
+          "properties": {
+            "name": {
+              "default": "",
+              "description": "this is the name of the common config storage. please see section \"Storage\" for more information",
+              "title": "name"
+            },
+            "size": {
+              "default": "",
+              "description": "this is the size of the common config storage. please see section \"Storage\" for more information",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner",
+              "title": "volumeName"
+            }
+          },
+          "title": "conf",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "properties": {
+            "name": {
+              "default": "",
+              "description": "this is the name of the common persistant temp storage. please see section \"Storage\" for more information",
+              "title": "name"
+            },
+            "size": {
+              "default": "",
+              "description": "this is the size of the common ptemp storage. please see section \"Storage\" for more information",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner",
+              "title": "volumeName"
+            }
+          },
+          "title": "ptemp",
+          "type": "object"
+        }
+      },
+      "title": "storage",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/envbackend/values.yaml b/charts/envbackend/values.yaml
new file mode 100644
index 0000000..b9fad06
--- /dev/null
+++ b/charts/envbackend/values.yaml
@@ -0,0 +1,131 @@
+# yaml-language-server: $schema=values.schema.json
+storage:
+  conf:
+    # -- this is the name of the common config storage.
+    # please see section "Storage" for more information
+    name:
+    # -- this is the size of the common config storage.
+    # please see section "Storage" for more information
+    size:
+    # -- you can set the volumeName to the value of a pre-existing
+    # volume to avoid having the PV created for you by the csi driver provisioner
+    volumeName:
+  ptemp:
+    # -- this is the name of the common persistant temp storage.
+    # please see section "Storage" for more information
+    name:
+    # -- this is the size of the common ptemp storage.
+    # please see section "Storage" for more information
+    size:
+    # -- you can set the volumeName to the value of a pre-existing
+    # volume to avoid having the PV created for you by the csi driver provisioner
+    volumeName:
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type:
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http:
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https:
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language:
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer:
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/envdav/Chart.yaml b/charts/envdav/Chart.yaml
new file mode 100644
index 0000000..05c58e0
--- /dev/null
+++ b/charts/envdav/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-environment-dav
+description: Provides WebDAV access to environment resources such as the conf PVC and the ptemp PVC
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/envdav/README.md b/charts/envdav/README.md
new file mode 100644
index 0000000..7dab76f
--- /dev/null
+++ b/charts/envdav/README.md
@@ -0,0 +1,145 @@
+
+
+# nplus-environment-dav
+
+Provides WebDAV access to environment resources such as the conf PVC and the ptemp PVC
+
+## nplus-environment-dav Chart Configuration
+
+You can customize / configure nplus-environment-dav by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+account | the dav user |  `"admin"` |
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"toolbox2"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"cr.nplus.cloud/subscription"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/dav"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |   |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8080` |
+**meta**&#8203;.ports&#8203;.https | The tls / https port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8443` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |   |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"envdav"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+nameOverride | This overrides the output of the internal name function |   |
+nodeSelector | select specific nodes for this component |   |
+password | password of the dav user |  `"admin"` |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |  `"1"` |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |  `"512Mi"` |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |  `"1m"` |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |  `"64Mi"` |
+secret | Alternatively, define a secret |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+
diff --git a/charts/envdav/templates/ingress.tpl b/charts/envdav/templates/ingress.tpl
new file mode 100644
index 0000000..32f7ef3
--- /dev/null
+++ b/charts/envdav/templates/ingress.tpl
@@ -0,0 +1,16 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
diff --git a/charts/envdav/templates/networkpolicy.tpl b/charts/envdav/templates/networkpolicy.tpl
new file mode 100644
index 0000000..f922e7b
--- /dev/null
+++ b/charts/envdav/templates/networkpolicy.tpl
@@ -0,0 +1,39 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+spec:
+  podSelector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  ingress:
+
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+
+  - from:
+    - ipBlock:
+        cidr: {{ ((.this.security).cni).adminIpRange | quote }}
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+
+  policyTypes:
+  - Egress
+  - Ingress
+
+  egress:
+    # -- Access DNS
+    - ports:
+      - protocol: TCP
+        port: 53
+      - protocol: UDP
+        port: 53
+{{- end }}
\ No newline at end of file
diff --git a/charts/envdav/templates/pdb.tpl b/charts/envdav/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/envdav/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/envdav/templates/service.tpl b/charts/envdav/templates/service.tpl
new file mode 100644
index 0000000..ba9db18
--- /dev/null
+++ b/charts/envdav/templates/service.tpl
@@ -0,0 +1,33 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service,
+  # access is purely through an ingress if desired.
+  type: ClusterIP
+  clusterIP: None
+
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
+
diff --git a/charts/envdav/templates/statefulset.tpl b/charts/envdav/templates/statefulset.tpl
new file mode 100644
index 0000000..bf79867
--- /dev/null
+++ b/charts/envdav/templates/statefulset.tpl
@@ -0,0 +1,89 @@
+{{- include "nplus.init" $ -}}
+{{- if not ((.this.storage).conf).name -}}
+  {{ fail "conf name must be set" }}
+{{- end -}}
+
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+
+spec:
+  serviceName: {{ .component.fullName }}
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: 1
+  podManagementPolicy: OrderedReady
+  updateStrategy:
+      type: RollingUpdate
+  minReadySeconds: 30
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+      
+      containers:
+
+      - name: dav
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        command: [ "/nplus/davserver" ]
+        volumeMounts:
+        - name: conf
+          mountPath: /webdav/conf
+        - name: ptemp
+          mountPath: /webdav/ptemp
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        env:
+        # -- DAV Connection Credentials
+          {{- include "nplus.envCredentials" (list
+            "DAV_USER"      $.this.account
+            "DAV_PASSWORD"  $.this.password
+                            $.this.secret
+          ) | nindent 10 }}
+
+          - name: DAV_ROOT
+            value: "/dav"
+
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}       
+
+        readinessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          initialDelaySeconds: 15
+          periodSeconds: 10
+        livenessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          initialDelaySeconds: 15
+          periodSeconds: 10
+
+      volumes:
+      - name: conf
+        persistentVolumeClaim:
+          claimName: conf
+      - name: ptemp
+        persistentVolumeClaim:
+          claimName: ptemp
+
diff --git a/charts/envdav/values.schema.json b/charts/envdav/values.schema.json
new file mode 100644
index 0000000..87bce13
--- /dev/null
+++ b/charts/envdav/values.schema.json
@@ -0,0 +1,489 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "account": {
+      "default": "admin",
+      "description": "the dav user",
+      "title": "account"
+    },
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "toolbox2",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullPolicy": {
+          "default": "IfNotPresent",
+          "title": "pullPolicy",
+          "type": "string"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "cr.nplus.cloud/subscription",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "1.2.1300",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/dav",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8080",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "8443",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "envdav",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta",
+      "type": "object"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "password": {
+      "default": "admin",
+      "description": "password of the dav user",
+      "title": "password"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "1",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "512Mi",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "1m",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "64Mi",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "secret": {
+      "default": "",
+      "description": "Alternatively, define a secret",
+      "title": "secret"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/envdav/values.yaml b/charts/envdav/values.yaml
new file mode 100644
index 0000000..99bebfe
--- /dev/null
+++ b/charts/envdav/values.yaml
@@ -0,0 +1,240 @@
+# yaml-language-server: $schema=values.schema.json
+# -- provide the image to be used for this component
+image:
+  # -- if you use a private repo, feel free to set it here
+  repo: cr.nplus.cloud/subscription
+  # -- the name of the image to use
+  name: toolbox2
+  # -- the tag of the image to use
+  tag: latest
+  pullPolicy: IfNotPresent
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+# -- the dav user
+account: admin
+# -- password of the dav user
+password: admin
+# -- Alternatively, define a secret
+secret:
+meta:
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8080
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https: 8443
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: envdav
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language:
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer:
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: true
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/dav"
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu: "1m"
+    # -- Set the share of guaranteed RAM to the container
+    memory: "64Mi"
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu: "1"
+    # -- The maximum allowed RAM for the container
+    memory: "512Mi"
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/environment/Chart.yaml b/charts/environment/Chart.yaml
new file mode 100644
index 0000000..b912791
--- /dev/null
+++ b/charts/environment/Chart.yaml
@@ -0,0 +1,34 @@
+apiVersion: v2
+name: nplus-environment
+description: Installs Namespace-Wide Resources such as the conf PVC, the toolbox and the nplus monitoring service
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+  - name: nplus-environment-backend
+    alias: backend
+    version: "*-0"
+    repository: "file://../envbackend"
+  - name: nplus-environment-dav
+    alias: dav
+    condition: components.dav
+    version: "*-0"
+    repository: "file://../envdav"
+  - name: nplus-environment-toolbox
+    alias: toolbox
+    condition: components.toolbox
+    version: "*-0"
+    repository: "file://../envtoolbox"
+  - name: nplus-environment-operator
+    alias: operator
+    version: "*-0"
+    repository: "file://../envoperator"
+  - name: nplus-prepper
+    alias: prepper
+    condition: components.prepper
+    version: "*-0"
+    repository: "file://../prepper"
+version: 1.0.0
diff --git a/charts/environment/README.md b/charts/environment/README.md
new file mode 100644
index 0000000..31da37d
--- /dev/null
+++ b/charts/environment/README.md
@@ -0,0 +1,103 @@
+
+
+# nplus-environment
+
+Installs Namespace-Wide Resources such as the conf PVC, the toolbox and the nplus monitoring service
+
+This Environment Chart provides a common config pool and administrative tools to
+operate all nplus instances in this namespace.
+There must be exactly one deployed instance of this environment chart per kubernetes namespace.
+Without the environment, the instance and component charts will fail to deploy.
+
+It also deployes the operator, which is a monitoring component to observe all instances and provide
+healthyness information to the administrator and third party dashboards
+
+## nplus-environment Chart Configuration
+
+You can customize / configure nplus-environment by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+**components**&#8203;.dav | Enables WebDAV access to conf and ptemp |  `true` |
+**components**&#8203;.prepper | enables an optional prepper that you can use to deploy fonts, scripts etc. during environment setup |  `false` |
+**components**&#8203;.toolbox | enables the toolbox |  `true` |
+environmentNameOverride | If you want to override the name of the Environment for display purposes, do it here. |   |
+**global**&#8203;.environment&#8203;.storage&#8203;.conf&#8203;.name | this is the name of the common config storage. please see section "Storage" for more information |  `"conf"` |
+**global**&#8203;.environment&#8203;.storage&#8203;.conf&#8203;.size | this is the size of the common config storage. please see section "Storage" for more information |  `"10Gi"` |
+**global**&#8203;.environment&#8203;.storage&#8203;.conf&#8203;.volumeName | you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner |   |
+**global**&#8203;.environment&#8203;.storage&#8203;.ptemp&#8203;.name | this is the name of the common persistant temp storage. please see section "Storage" for more information |  `"ptemp"` |
+**global**&#8203;.environment&#8203;.storage&#8203;.ptemp&#8203;.size | this is the size of the common ptemp storage. please see section "Storage" for more information |  `"10Gi"` |
+**global**&#8203;.environment&#8203;.storage&#8203;.ptemp&#8203;.volumeName | you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner |   |
+**global**&#8203;.meta&#8203;.isEnvironment | specifies that this is deployment is part of an Environment. Used to determine the correct  name of the deployment <br>Do not change | **info only**, do not change<br> `true` |
+
diff --git a/charts/environment/templates/NOTES.txt b/charts/environment/templates/NOTES.txt
new file mode 100644
index 0000000..7a65a8b
--- /dev/null
+++ b/charts/environment/templates/NOTES.txt
@@ -0,0 +1,43 @@
+{{ .component.chartName }} {{ .Chart.Version }} {{- if .Chart.AppVersion }} / {{ .Chart.AppVersion }}{{- end }}
+
+{{ .Chart.Description }}
+
+To uninstall, use
+   helm uninstall {{ include "nplus.cli" . }}
+{{ if (.Values.dav).enabled }}
+The environment DAV Server is enabled. To get logs, use
+   kubectl logs -n lab -l nplus/component=nplus-environment,nplus/role=davserver
+to connect, browse to
+   https://{{ .Release.Name }}.{{ .this.ingress.domain }}/dav
+{{- else }}
+The environment DAV Server is disabled.
+{{- end }}
+
+{{- if (.Values.nstoreDownloader).enabled }}
+The nstore Downloader is enabled. To get logs, use
+   kubectl logs -n lab -l nplus/component=nplus-environment,nplus/role=downloader
+{{- else }}
+The nstore Downloader is disabled.
+{{- end }}
+
+{{- if (.Values.toolbox).enabled }}
+The toolbox is enabled. To get logs, use
+   kubectl logs -n lab -l nplus/component=nplus-environment,nplus/role=toolbox
+{{- else }}
+The toolbox is disabled.
+{{- end }}
+
+{{- if (.Values.operator).enabled }}
+The operator is enabled. You can get information on nscale Instances and Components using
+   kubectl get instances,components
+{{- if (.Values.operator).ui }}
+Also, the UI is enabled, access it at
+   https://{{ .Release.Name }}.{{ .this.ingress.domain }}/monitoring
+{{- else }}
+The UI is disabled.
+{{- end }}
+{{- else }}
+The operator is disabled.
+{{- end }}
+
+Providing {{ ((.this.storage).conf).size }} of storage under the name "{{ ((.this.storage).conf).name }}" of class "{{ ((.this.storage).conf).class | default "default" }}"
diff --git a/charts/environment/templates/certificate.tpl b/charts/environment/templates/certificate.tpl
new file mode 100644
index 0000000..4169e5b
--- /dev/null
+++ b/charts/environment/templates/certificate.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.certificate" . | nindent 0 }}
\ No newline at end of file
diff --git a/charts/environment/values.schema.json b/charts/environment/values.schema.json
new file mode 100644
index 0000000..195d655
--- /dev/null
+++ b/charts/environment/values.schema.json
@@ -0,0 +1,2435 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "backend": {
+      "description": "Installs Namespace-Wide Resources such as the conf PVC and the ptemp PVC",
+      "properties": {
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "storage": {
+          "additionalProperties": false,
+          "description": "yaml-language-server: $schema=values.schema.json",
+          "properties": {
+            "conf": {
+              "additionalProperties": false,
+              "properties": {
+                "name": {
+                  "default": "",
+                  "description": "this is the name of the common config storage. please see section \"Storage\" for more information",
+                  "title": "name"
+                },
+                "size": {
+                  "default": "",
+                  "description": "this is the size of the common config storage. please see section \"Storage\" for more information",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner",
+                  "title": "volumeName"
+                }
+              },
+              "title": "conf",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "properties": {
+                "name": {
+                  "default": "",
+                  "description": "this is the name of the common persistant temp storage. please see section \"Storage\" for more information",
+                  "title": "name"
+                },
+                "size": {
+                  "default": "",
+                  "description": "this is the size of the common ptemp storage. please see section \"Storage\" for more information",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner",
+                  "title": "volumeName"
+                }
+              },
+              "title": "ptemp",
+              "type": "object"
+            }
+          },
+          "title": "storage",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-environment-backend",
+      "type": "object"
+    },
+    "components": {
+      "additionalProperties": false,
+      "properties": {
+        "dav": {
+          "default": "true",
+          "description": "Enables WebDAV access to conf and ptemp",
+          "title": "dav"
+        },
+        "prepper": {
+          "default": "false",
+          "description": "enables an optional prepper that you can use to deploy fonts, scripts etc. during environment setup",
+          "title": "prepper"
+        },
+        "toolbox": {
+          "default": "true",
+          "description": "enables the toolbox",
+          "title": "toolbox"
+        }
+      },
+      "title": "components",
+      "type": "object"
+    },
+    "dav": {
+      "description": "Provides WebDAV access to environment resources such as the conf PVC and the ptemp PVC",
+      "properties": {
+        "account": {
+          "default": "admin",
+          "description": "the dav user",
+          "title": "account"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "toolbox2",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "cr.nplus.cloud/subscription",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "1.2.1300",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/dav",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8080",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8443",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "envdav",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "password": {
+          "default": "admin",
+          "description": "password of the dav user",
+          "title": "password"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "1",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "512Mi",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "1m",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "64Mi",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "secret": {
+          "default": "",
+          "description": "Alternatively, define a secret",
+          "title": "secret"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-environment-dav",
+      "type": "object"
+    },
+    "environmentNameOverride": {
+      "default": "",
+      "description": "If you want to override the name of the Environment for display purposes, do it here.",
+      "title": "environmentNameOverride"
+    },
+    "global": {
+      "additionalProperties": false,
+      "properties": {
+        "environment": {
+          "additionalProperties": false,
+          "properties": {
+            "storage": {
+              "additionalProperties": false,
+              "properties": {
+                "conf": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "name": {
+                      "default": "conf",
+                      "description": "this is the name of the common config storage. please see section \"Storage\" for more information",
+                      "title": "name"
+                    },
+                    "size": {
+                      "default": "10Gi",
+                      "description": "this is the size of the common config storage. please see section \"Storage\" for more information",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "conf",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "name": {
+                      "default": "ptemp",
+                      "description": "this is the name of the common persistant temp storage. please see section \"Storage\" for more information",
+                      "title": "name"
+                    },
+                    "size": {
+                      "default": "10Gi",
+                      "description": "this is the size of the common ptemp storage. please see section \"Storage\" for more information",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "ptemp",
+                  "type": "object"
+                }
+              },
+              "title": "storage",
+              "type": "object"
+            }
+          },
+          "title": "environment",
+          "type": "object"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "isEnvironment": {
+              "default": "true",
+              "description": "specifies that this is deployment is part of an Environment. Used to determine the correct  name of the deployment @internal -- Do not change",
+              "title": "isEnvironment"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        }
+      },
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "operator": {
+      "description": "Installs the nplus operator managin the custom resource definitions for nplus and nscale",
+      "properties": {
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "operator",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "cr.nplus.cloud/subscription",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "1.2.1300",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/monitoring",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8080",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8443",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "envoperator",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "1",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "512Mi",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "1m",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "64Mi",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "ui": {
+          "default": "true",
+          "description": "Enables the web ui, default under /monitoring",
+          "title": "ui"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-environment-operator",
+      "type": "object"
+    },
+    "prepper": {
+      "description": "nplus Prepper, used to deploy assets prior to component deployment",
+      "properties": {
+        "download": {
+          "default": "",
+          "description": "A list of URLs (Links) to Assets to download before anything else if the download is a .tar.gz, it is automatically untared to /pool/downloads",
+          "title": "download"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "toolbox2",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "cr.nplus.cloud/subscription",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "1.2.1300",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "yaml-language-server: $schema=values.schema.json",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "application",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/application",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "/pool",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "/tmp",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "nstl": {
+          "additionalProperties": false,
+          "properties": {
+            "host": {
+              "default": "",
+              "description": "The dns of the *nscale Server Storage Layer*. This is used to add it to the nappl configuration",
+              "title": "host"
+            }
+          },
+          "title": "nstl",
+          "type": "object"
+        },
+        "prerun": {
+          "default": "",
+          "description": "A list of scripts to run before the deployment of Apps",
+          "title": "prerun"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "rs": {
+          "additionalProperties": false,
+          "properties": {
+            "host": {
+              "default": "",
+              "description": "The dns of the *nscale rendition Server*. This is used to add it to the nappl configuration",
+              "title": "host"
+            }
+          },
+          "title": "rs",
+          "type": "object"
+        },
+        "run": {
+          "default": "",
+          "description": "A list of scripts to run after the deployment of Apps",
+          "title": "run"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-prepper",
+      "type": "object"
+    },
+    "toolbox": {
+      "description": "Installs the environment toolbox with git and nstore downloader installed, also serving as target for pool copy actions in the pipeline",
+      "properties": {
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "toolbox2",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "cr.nplus.cloud/subscription",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "1.2.1300",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "envtoolbox",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "nstoreDownloader": {
+          "additionalProperties": false,
+          "description": "yaml-language-server: $schema=values.schema.json",
+          "properties": {
+            "enabled": {
+              "default": "false",
+              "description": "enables the nstore downloader",
+              "title": "enabled"
+            },
+            "nstore": {
+              "default": "`https://nstore.ceyoniq.com...`",
+              "description": "set the nstore URL",
+              "title": "nstore"
+            },
+            "target": {
+              "default": "pool/nstore",
+              "description": "target directory in the conf pv",
+              "title": "target"
+            }
+          },
+          "title": "nstoreDownloader",
+          "type": "object"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "1",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "512Mi",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "1m",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "64Mi",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-environment-toolbox",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/environment/values.yaml b/charts/environment/values.yaml
new file mode 100644
index 0000000..6d7114b
--- /dev/null
+++ b/charts/environment/values.yaml
@@ -0,0 +1,38 @@
+# yaml-language-server: $schema=values.schema.json
+components:
+  # -- Enables WebDAV access to conf and ptemp
+  dav: true
+  # -- enables the toolbox
+  toolbox: true
+  # -- enables an optional prepper that you can use to deploy fonts, scripts etc. during environment setup
+  prepper: false
+global:
+  environment:
+    storage:
+      conf:
+        # -- this is the name of the common config storage.
+        # please see section "Storage" for more information
+        name: "conf"
+        # -- this is the size of the common config storage.
+        # please see section "Storage" for more information
+        size: "10Gi"
+        # -- you can set the volumeName to the value of a pre-existing
+        # volume to avoid having the PV created for you by the csi driver provisioner
+        volumeName:
+      ptemp:
+        # -- this is the name of the common persistant temp storage.
+        # please see section "Storage" for more information
+        name: "ptemp"
+        # -- this is the size of the common ptemp storage.
+        # please see section "Storage" for more information
+        size: "10Gi"
+        # -- you can set the volumeName to the value of a pre-existing
+        # volume to avoid having the PV created for you by the csi driver provisioner
+        volumeName:
+  meta:
+    # -- specifies that this is deployment is part of an Environment. Used to determine the correct 
+    # name of the deployment
+    # @internal -- Do not change
+    isEnvironment: true
+# -- If you want to override the name of the Environment for display purposes, do it here.
+environmentNameOverride:
diff --git a/charts/envoperator/Chart.yaml b/charts/envoperator/Chart.yaml
new file mode 100644
index 0000000..73fd5f0
--- /dev/null
+++ b/charts/envoperator/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-environment-operator
+description: Installs the nplus operator managin the custom resource definitions for nplus and nscale
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/envoperator/README.md b/charts/envoperator/README.md
new file mode 100644
index 0000000..9b20830
--- /dev/null
+++ b/charts/envoperator/README.md
@@ -0,0 +1,141 @@
+
+
+# nplus-environment-operator
+
+Installs the nplus operator managin the custom resource definitions for nplus and nscale
+
+## nplus-environment-operator Chart Configuration
+
+You can customize / configure nplus-environment-operator by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"operator"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"cr.nplus.cloud/subscription"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/monitoring"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |   |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8080` |
+**meta**&#8203;.ports&#8203;.https | The tls / https port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8443` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |   |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"envoperator"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+nameOverride | This overrides the output of the internal name function |   |
+nodeSelector | select specific nodes for this component |   |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |  `"1"` |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |  `"512Mi"` |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |  `"1m"` |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |  `"64Mi"` |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+ui | Enables the web ui, default under /monitoring |  `true` |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+
diff --git a/charts/envoperator/templates/ingress.tpl b/charts/envoperator/templates/ingress.tpl
new file mode 100644
index 0000000..e79625c
--- /dev/null
+++ b/charts/envoperator/templates/ingress.tpl
@@ -0,0 +1,18 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      {{- if .this.ui }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+      {{- end }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
diff --git a/charts/envoperator/templates/networkpolicy.tpl b/charts/envoperator/templates/networkpolicy.tpl
new file mode 100644
index 0000000..e33a4c1
--- /dev/null
+++ b/charts/envoperator/templates/networkpolicy.tpl
@@ -0,0 +1,46 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+spec:
+  podSelector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+
+  ingress:
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+
+  - from:
+    - ipBlock:
+        cidr: {{ ((.this.security).cni).adminIpRange | quote }}
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+
+  policyTypes:
+  - Egress
+  - Ingress
+
+  egress:
+  - ports:
+      # -- Possible K8s API
+      - protocol: TCP
+        port: 16443
+      # -- Possible K8s API
+      - protocol: TCP
+        port: 443
+      # -- Access DNS
+      - protocol: TCP
+        port: 53
+      # -- Access DNS
+      - protocol: UDP
+        port: 53
+{{- end }}
\ No newline at end of file
diff --git a/charts/envoperator/templates/pdb.tpl b/charts/envoperator/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/envoperator/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/envoperator/templates/rbac.tpl b/charts/envoperator/templates/rbac.tpl
new file mode 100755
index 0000000..4f2059e
--- /dev/null
+++ b/charts/envoperator/templates/rbac.tpl
@@ -0,0 +1,60 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .component.fullName }}-svc-account
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ .component.fullName }}-role
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+rules:
+  - apiGroups: ["apps"]
+    resources: ["deployments", "statefulsets"]
+    verbs: ["get", "update", "patch", "list", "watch"]
+  - apiGroups: ["batch"]
+    resources: ["jobs"]
+    verbs: ["get", "update", "patch", "list", "watch", "delete"]
+  - apiGroups: ["nplus.cloud"]
+    resources: ["components", "instances", "applications"]
+    verbs: ["get", "update", "patch", "list", "watch"]
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ .component.fullName }}-role-binding
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: {{ .component.fullName }}-role
+subjects:
+- kind: ServiceAccount
+  name: {{ .component.fullName }}-svc-account
diff --git a/charts/envoperator/templates/service.tpl b/charts/envoperator/templates/service.tpl
new file mode 100644
index 0000000..22c73b1
--- /dev/null
+++ b/charts/envoperator/templates/service.tpl
@@ -0,0 +1,33 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+
+
+  type: ClusterIP
+  clusterIP: None
+
+
+  ports:
+  {{- if .this.ui }}
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  {{- end }}
+
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
diff --git a/charts/envoperator/templates/statefulset.tpl b/charts/envoperator/templates/statefulset.tpl
new file mode 100644
index 0000000..df8f474
--- /dev/null
+++ b/charts/envoperator/templates/statefulset.tpl
@@ -0,0 +1,72 @@
+{{- include "nplus.init" $ -}}
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+
+spec:
+  serviceName: {{ .component.fullName }}
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: 1
+  podManagementPolicy: OrderedReady
+  updateStrategy:
+      type: RollingUpdate
+  minReadySeconds: 30
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      serviceAccountName: {{ .component.fullName }}-svc-account
+      
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+      
+      containers:
+
+      - name: operator
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+        
+        env:
+        - name: OP_PREFIX
+          value: "/monitoring"
+        {{- if .this.ui }}
+        - name: OP_UI
+          value: "true"
+        {{- end }}
+        # -- feel free to switch verbode loggin ON here:
+        # - name: OP_VERBOSE
+        #   value: "true"
+
+        readinessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          initialDelaySeconds: 10
+          periodSeconds: 10
+        livenessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          initialDelaySeconds: 10
+          periodSeconds: 10
\ No newline at end of file
diff --git a/charts/envoperator/values.schema.json b/charts/envoperator/values.schema.json
new file mode 100644
index 0000000..e4ebcaa
--- /dev/null
+++ b/charts/envoperator/values.schema.json
@@ -0,0 +1,462 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "operator",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullPolicy": {
+          "default": "IfNotPresent",
+          "title": "pullPolicy",
+          "type": "string"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "cr.nplus.cloud/subscription",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "1.2.1300",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/monitoring",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8080",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "8443",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "envoperator",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta",
+      "type": "object"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "1",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "512Mi",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "1m",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "64Mi",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "ui": {
+      "default": "true",
+      "description": "Enables the web ui, default under /monitoring",
+      "title": "ui"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/envoperator/values.yaml b/charts/envoperator/values.yaml
new file mode 100644
index 0000000..9eb37da
--- /dev/null
+++ b/charts/envoperator/values.yaml
@@ -0,0 +1,230 @@
+# yaml-language-server: $schema=values.schema.json
+# -- provide the image to be used for this component
+image:
+  # -- if you use a private repo, feel free to set it here
+  repo: cr.nplus.cloud/subscription
+  # -- the name of the image to use
+  name: operator
+  # -- the tag of the image to use
+  tag: latest
+  pullPolicy: IfNotPresent
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+# -- Enables the web ui, default under /monitoring
+ui: true
+meta:
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8080
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https: 8443
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: envoperator
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language:
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer:
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: true
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/monitoring"
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu: "1m"
+    # -- Set the share of guaranteed RAM to the container
+    memory: "64Mi"
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu: "1"
+    # -- The maximum allowed RAM for the container
+    memory: "512Mi"
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/envtoolbox/Chart.yaml b/charts/envtoolbox/Chart.yaml
new file mode 100644
index 0000000..3acd8d3
--- /dev/null
+++ b/charts/envtoolbox/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-environment-toolbox
+description: Installs the environment toolbox with git and nstore downloader installed, also serving as target for pool copy actions in the pipeline
+icon: data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4KPHN2ZyB2ZXJzaW9uPSIxLjEiIGlkPSJFYmVuZV8xIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB4PSIwcHgiIHk9IjBweCIKCSB2aWV3Qm94PSIwIDAgNTEuMDI0IDUxLjAyNCIgZW5hYmxlLWJhY2tncm91bmQ9Im5ldyAwIDAgNTEuMDI0IDUxLjAyNCIgeG1sOnNwYWNlPSJwcmVzZXJ2ZSI+CjxnPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIzMi4zMjIsMTkuNzQ0IDIwLjY0OSwxOS43NDQgMTguNTkxLDMxLjQxNyAzMC4yNjQsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iNDcuMTg1LDE5Ljc0NCAzNS41MTIsMTkuNzQ0IDMzLjQ1NCwzMS40MTcgNDUuMTI2LDMxLjQxNyAJIi8+Cgk8cG9seWdvbiBmaWxsPSIjQTRCRkU0IiBwb2ludHM9IjI5Ljc2NiwzNC41NTEgMTguMDk0LDM0LjU1MSAxNi4wMzUsNDYuMjI0IDI3LjcwOCw0Ni4yMjQgCSIvPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIxNy41NywxOS43NDQgNS44OTcsMTkuNzQ0IDMuODM5LDMxLjQxNyAxNS41MTIsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iMzUuMTUsNC43OTkgMjMuNDc3LDQuNzk5IDIxLjQxOSwxNi40NzIgMzMuMDkyLDE2LjQ3MiAJIi8+Cjwvc3ZnPgo=
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/envtoolbox/README.md b/charts/envtoolbox/README.md
new file mode 100644
index 0000000..34734fb
--- /dev/null
+++ b/charts/envtoolbox/README.md
@@ -0,0 +1,126 @@
+
+
+# nplus-environment-toolbox
+
+Installs the environment toolbox with git and nstore downloader installed, also serving as target for pool copy actions in the pipeline
+
+## nplus-environment-toolbox Chart Configuration
+
+You can customize / configure nplus-environment-toolbox by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"toolbox2"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"cr.nplus.cloud/subscription"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |   |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |   |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"envtoolbox"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+nameOverride | This overrides the output of the internal name function |   |
+nodeSelector | select specific nodes for this component |   |
+**nstoreDownloader**&#8203;.enabled | enables the nstore downloader |  `false` |
+**nstoreDownloader**&#8203;.nstore | set the nstore URL |  `https://nstore.ceyoniq.com...` |
+**nstoreDownloader**&#8203;.target | target directory in the conf pv |  `"pool/nstore"` |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |  `"1"` |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |  `"512Mi"` |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |  `"1m"` |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |  `"64Mi"` |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+
diff --git a/charts/envtoolbox/templates/cronjob-nstore.tpl b/charts/envtoolbox/templates/cronjob-nstore.tpl
new file mode 100644
index 0000000..be18aa4
--- /dev/null
+++ b/charts/envtoolbox/templates/cronjob-nstore.tpl
@@ -0,0 +1,72 @@
+{{- define "nplus.environment.nstorecopy" -}}
+{{- if (.Values.nstoreDownloader).enabled }}
+template:
+  metadata:
+    labels:
+      {{- include "nplus.instanceLabels" . | nindent 6 }}
+  spec:
+    {{- include "nplus.podSecurityContext" . | nindent 4 }}
+    {{- include "nplus.imagePullSecrets" . | nindent 4 }}
+    containers:
+    - name: downloader
+      image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+      imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+      {{ include "nplus.containerSecurityContext" . | nindent 6 }}
+      command: [ "/bin/sh", "-c" ]
+      args:
+      - |
+          mkdir -p /conf/{{ .Values.nstoreDownloader.target }}
+          cd /conf/{{ .Values.nstoreDownloader.target }}
+          wget -r -np -nH -nc -nd -A zip -X '*/*/*/*/*/*/1*,*/*/*/*/*/*/2*,*/*/*/*/*/*/3*,*/*/*/*/*/*/4*,*/*/*/*/*/*/5*,*/*/*/*/*/*/6*,*/*/*/*/*/*/7*,*/*/*/*/*/*/8*' -nd {{ .Values.nstoreDownloader.nstore }}
+      volumeMounts:
+      - name: conf
+        mountPath: /conf
+
+    restartPolicy: OnFailure
+    volumes:
+    - name: conf
+      persistentVolumeClaim:
+        claimName: conf
+{{- end -}}
+{{- end -}}
+---
+{{- if .Values.nstoreDownloader.enabled }}
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: {{ .component.fullName }}-nstore
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  schedule: "0 3 * * *"
+  concurrencyPolicy: Forbid
+  successfulJobsHistoryLimit: 0
+  failedJobsHistoryLimit: 1
+  jobTemplate:
+    spec:
+      {{- include "nplus.environment.nstorecopy" . | nindent 6 }}
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: {{ .component.fullName }}-nstore-oncreate
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  ttlSecondsAfterFinished: 60
+  {{- include "nplus.environment.nstorecopy" . | nindent 2 }}
+{{- else }}
+# nstore Downloader is disabled
+{{- end }}
\ No newline at end of file
diff --git a/charts/envtoolbox/templates/networkpolicy.tpl b/charts/envtoolbox/templates/networkpolicy.tpl
new file mode 100644
index 0000000..db7e064
--- /dev/null
+++ b/charts/envtoolbox/templates/networkpolicy.tpl
@@ -0,0 +1,33 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+spec:
+  podSelector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+
+  policyTypes:
+  - Egress
+  - Ingress
+
+  egress:
+  - ports:
+      # -- Possible K8s API
+      - protocol: TCP
+        port: 16443
+      # -- Possible K8s API AND potential git server
+      - protocol: TCP
+        port: 443
+      # -- Access DNS
+      - protocol: TCP
+        port: 53
+      # -- Access DNS
+      - protocol: UDP
+        port: 53
+{{- end }}
\ No newline at end of file
diff --git a/charts/envtoolbox/templates/pdb.tpl b/charts/envtoolbox/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/envtoolbox/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/envtoolbox/templates/rbac.tpl b/charts/envtoolbox/templates/rbac.tpl
new file mode 100755
index 0000000..97d0c63
--- /dev/null
+++ b/charts/envtoolbox/templates/rbac.tpl
@@ -0,0 +1,76 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .component.fullName }}-svc-account
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ .component.fullName }}-role
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+rules:
+  - apiGroups: [""]
+    resources: ["pods", "secrets","serviceaccounts", "persistentvolumeclaims", "configmaps", "services", "replicationcontrollers", "pods/log"]
+    verbs: ["create", "get", "update", "patch", "delete", "list", "watch"]
+  - apiGroups: ["apps"]
+    resources: ["deployments", "statefulsets", "daemonsets", "replicasets"]
+    verbs: ["create", "get", "update", "patch", "delete", "list", "watch"]
+  - apiGroups: ["rbac.authorization.k8s.io"]
+    resources: ["Role", "roles", "rolebindings"]
+    verbs: ["create", "get", "update", "patch", "delete", "list", "watch"]
+  - apiGroups: ["batch"]
+    resources: ["jobs", "cronjobs"]
+    verbs: ["create", "get", "update", "patch", "delete", "list", "watch"]
+  - apiGroups: ["autoscaling"]
+    resources: ["horizontalpodautoscalers"]
+    verbs: ["create", "get", "update", "patch", "delete", "list", "watch"]
+  - apiGroups: ["networking.k8s.io"]
+    resources: ["ingresses"]
+    verbs: ["create", "get", "update", "patch", "delete", "list", "watch"]
+  - apiGroups: ["cert-manager.io"]
+    resources: ["certificates"]
+    verbs: ["create", "get", "update", "patch", "delete", "list", "watch"]
+
+  - apiGroups: ["nplus.cloud"]
+    resources: ["components", "instances"]
+    verbs: ["get", "update", "patch", "list", "watch"]
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ .component.fullName }}-role-binding
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: {{ .component.fullName }}-role
+subjects:
+- kind: ServiceAccount
+  name: {{ .component.fullName }}-svc-account
diff --git a/charts/envtoolbox/templates/statefulset.tpl b/charts/envtoolbox/templates/statefulset.tpl
new file mode 100644
index 0000000..a99d866
--- /dev/null
+++ b/charts/envtoolbox/templates/statefulset.tpl
@@ -0,0 +1,125 @@
+{{- include "nplus.init" $ -}}
+
+{{- if not ((.this.storage).conf).name -}}
+  {{ fail "conf name must be set" }}
+{{- end -}}
+{{- if not ((.this.storage).ptemp).name -}}
+  {{ fail "ptemp name must be set" }}
+{{- end -}}
+
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+
+spec:
+  serviceName: {{ .component.fullName }}
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: 1
+  podManagementPolicy: OrderedReady
+  updateStrategy:
+      type: RollingUpdate
+  minReadySeconds: 30
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+        kubectl.kubernetes.io/default-container: toolbox
+    spec:
+      serviceAccountName: {{ .component.fullName }}-svc-account
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+      
+      initContainers:
+      {{/*
+      - name: deploy
+        image: {{ .Values.toolboxImage }}
+        imagePullPolicy: {{ .Values.toolboxImagePullPolicy }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        command: [ "/bin/sh", "-c" ]
+        args:
+        - |
+            echo "deploying to /nplus"
+            cp -rnxv /opt/42i/nplus/* /nplus
+        volumeMounts:
+        - name: nplus
+          mountPath: /nplus
+      {{- end }} */}}
+      - name: dirprepare
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        {{- include "nplus.initResources" . | nindent 8 }}
+        command: [ "/bin/sh", "-c" ]
+        args:
+        - |
+            mkdir -p /conf/pool/{apps,fonts,snippets,scripts,snc} && \
+            {{- if not ((.this.storage).conf).cifs }}
+            chmod 775 -R /conf/pool && \
+            {{- end }}
+            echo "ok."
+        volumeMounts:
+        - name: conf
+          mountPath: /conf
+      - name: gitprepare
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        {{- include "nplus.initResources" . | nindent 8 }}
+        command: [ "/bin/sh", "-c" ]
+        args:
+        - |
+            echo "checking git in /conf..."
+            if [ ! -f "/conf/.gitignore" ]; then
+            echo "writing .gitignore"
+            echo "/{{ .Values.nstoreDownloader.target }}/*" > /conf/.gitignore
+            fi
+            if [ ! -d "/conf/.git" ]; then
+            echo "init git in /conf with branch master"
+            git -C "/conf" init -b master
+            git -C "/conf" add .gitignore
+            echo "first commit (with .gitignore)"
+            git -C "/conf" commit -m "Initial commit for config of nplus environment {{ .Release.Namespace }}"
+            fi
+            echo "ok."
+        volumeMounts:
+        - name: conf
+          mountPath: /conf
+      containers:
+      - name: toolbox
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        command: [ "/bin/bash", "-c", "--" ]
+        args: [ "while true; do sleep 30; done;" ]
+
+        volumeMounts:
+        - name: conf
+          mountPath: /conf
+        - name: ptemp
+          mountPath: /ptemp
+        {{- include "nplus.resources" . | nindent 8 }}
+
+      volumes:
+      - name: ptemp
+        persistentVolumeClaim:
+          claimName: ptemp
+      - name: conf
+        persistentVolumeClaim:
+          claimName: conf
+
diff --git a/charts/envtoolbox/values.schema.json b/charts/envtoolbox/values.schema.json
new file mode 100644
index 0000000..23ff3f8
--- /dev/null
+++ b/charts/envtoolbox/values.schema.json
@@ -0,0 +1,380 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "toolbox2",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullPolicy": {
+          "default": "IfNotPresent",
+          "title": "pullPolicy",
+          "type": "string"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "cr.nplus.cloud/subscription",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "1.2.1300",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "envtoolbox",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta",
+      "type": "object"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "nstoreDownloader": {
+      "additionalProperties": false,
+      "properties": {
+        "enabled": {
+          "default": "false",
+          "description": "enables the nstore downloader",
+          "title": "enabled"
+        },
+        "nstore": {
+          "default": "`https://nstore.ceyoniq.com...`",
+          "description": "set the nstore URL",
+          "title": "nstore"
+        },
+        "target": {
+          "default": "pool/nstore",
+          "description": "target directory in the conf pv",
+          "title": "target"
+        }
+      },
+      "title": "nstoreDownloader",
+      "type": "object"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "1",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "512Mi",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "1m",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "64Mi",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/envtoolbox/values.yaml b/charts/envtoolbox/values.yaml
new file mode 100644
index 0000000..c971506
--- /dev/null
+++ b/charts/envtoolbox/values.yaml
@@ -0,0 +1,174 @@
+# yaml-language-server: $schema=values.schema.json
+nstoreDownloader:
+  # -- enables the nstore downloader
+  enabled: false
+  # -- set the nstore URL
+  # @default -- `https://nstore.ceyoniq.com...`
+  nstore: "https://nstore.ceyoniq.com/repository/com/ceyoniq/nscale/businessapps/"
+  # -- target directory in the conf pv
+  target: pool/nstore
+# -- provide the image to be used for this component
+image:
+  # -- if you use a private repo, feel free to set it here
+  repo: cr.nplus.cloud/subscription
+  # -- the name of the image to use
+  name: toolbox2
+  # -- the tag of the image to use
+  tag: "latest"
+  pullPolicy: IfNotPresent
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu: "1m"
+    # -- Set the share of guaranteed RAM to the container
+    memory: "64Mi"
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu: "1"
+    # -- The maximum allowed RAM for the container
+    memory: "512Mi"
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: envtoolbox
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http:
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https:
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language:
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer:
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/erpcmis/Chart.yaml b/charts/erpcmis/Chart.yaml
new file mode 100644
index 0000000..fdf5511
--- /dev/null
+++ b/charts/erpcmis/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-erpcmis
+description: nscale ERP CMIS, providing SAP S/4 HANA Public Cloud Archive Access
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/erpcmis/README.md b/charts/erpcmis/README.md
new file mode 100644
index 0000000..57d2576
--- /dev/null
+++ b/charts/erpcmis/README.md
@@ -0,0 +1,196 @@
+
+
+# nplus-component-erpcmis
+
+nscale ERP CMIS, providing SAP S/4 HANA Public Cloud Archive Access
+
+## nplus-component-erpcmis Chart Configuration
+
+You can customize / configure nplus-component-erpcmis by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+**alien**&#8203;.doAppend | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**alien**&#8203;.port | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**alien**&#8203;.server | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**alien**&#8203;.ssl | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**alien**&#8203;.url | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**alien**&#8203;.useSign | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"erp-cmis-connector"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/cmis/browser"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**javaOpts**&#8203;.javaMaxMem | set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed |   |
+**javaOpts**&#8203;.javaMaxRamPercentage | set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any. |   |
+**javaOpts**&#8203;.javaMinMem | set the minimum memory, java will consume |   |
+**javaOpts**&#8203;.javaMisc | Any misc Java Options that need to be passed to the container |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"java"` |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8096` |
+**meta**&#8203;.ports&#8203;.https | The tls / https port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8196` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"erpcmis-connector"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"erpcmis"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+**migration**&#8203;.checkDocuments | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**migration**&#8203;.checkIgnoreTime | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**migration**&#8203;.delay | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**migration**&#8203;.doListMigration | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**migration**&#8203;.enabled | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**migration**&#8203;.fileDelimiter | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**migration**&#8203;.viaFileSystem | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+minReplicaCount | if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas. |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-for-sap/erp-cmis/conf"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.logs&#8203;.path | Sets the path to the log files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-for-sap/erp-cmis/logs"` |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |  `"1Gi"` |
+**mounts**&#8203;.temp&#8203;.path | Sets the path to the temporary files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-for-sap/erp-cmis/temp"` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"1Gi"` |
+nameOverride | This overrides the output of the internal name function |   |
+**nappl**&#8203;.account | The technical account to login with |   |
+**nappl**&#8203;.domain | The domain of the technical account |   |
+**nappl**&#8203;.host | nappl host name |   |
+**nappl**&#8203;.instance | instance of the Application Layer, likely `instance1` |   |
+**nappl**&#8203;.password | The password of the technical accunt (if not set by secret) |   |
+**nappl**&#8203;.port | nappl port (http 8080 or https 8443) |   |
+**nappl**&#8203;.secret | An optional secret that holds the credentials (the keys must be `account` and `password`) |   |
+**nappl**&#8203;.ssl | sets the Advanced Connect to tls |   |
+nodeSelector | select specific nodes for this component |   |
+replicaCount | Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1. |  `1` |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**sign**&#8203;.authID | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**sign**&#8203;.keyAlias | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**sign**&#8203;.keyPassword | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+updateStrategy | the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures. |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+**xsap**&#8203;.useSign | Documentation pending until official release of the erp cmis image by *Ceyoniq* |   |
+
diff --git a/charts/erpcmis/compose.yaml b/charts/erpcmis/compose.yaml
new file mode 100644
index 0000000..d043f55
--- /dev/null
+++ b/charts/erpcmis/compose.yaml
@@ -0,0 +1,31 @@
+networks:
+  nscale:
+
+services:   
+  cmis-connector:
+    image: ceyoniq.azurecr.io/release/nscale/erp-cmis-connector:ubi.9.2.1000.2024032720
+    environment:
+      - CMIS_AL_HOST=application-layer
+      - CMIS_AL_PORT=8080
+      - CMIS_AL_SSL=false
+      - CMIS_AL_INSTANCE=nscalealinst1
+      - CONF_VIRUSSCAN_ACTIVE=false
+      - CONF_VIRUSSCAN_UNIXSOCK=false
+      - CONF_VIRUSSCAN_TEMP_FOLDER=
+      - CONF_VIRUSSCAN_SOCKPATH=
+      - CONF_VIRUSSCAN_HOST=clamav
+      - CONF_VIRUSSCAN_PORT=
+    ports:
+      - "8096:8096" # HTTP
+      - "8196:8196" # HTTPS
+    networks:
+      - nscale
+    depends_on:
+      - clamav
+      
+  clamav:
+    image: docker.io/clamav/clamav:1.2
+    networks:
+      - nscale
+    volumes:
+      - ./config/clamav/sockets/:/tmp/
\ No newline at end of file
diff --git a/charts/erpcmis/templates/component.tpl b/charts/erpcmis/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/erpcmis/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/erpcmis/templates/deployment.tpl b/charts/erpcmis/templates/deployment.tpl
new file mode 100644
index 0000000..f2d39e2
--- /dev/null
+++ b/charts/erpcmis/templates/deployment.tpl
@@ -0,0 +1,110 @@
+{{- include "nplus.init" $ -}}
+# Component: {{ .component.chartName }}
+# will connect to:
+{{- if (.this.nappl).host }}
+#   nappl: {{ if ($.this.nappl).ssl -}}https{{- else -}}http{{- end -}}://{{ ($.this.nappl).host }}:{{ (.this.nappl).port }}/{{ (.this.nappl).instance }}
+{{- else }}
+#   defined by config file in conf PV.
+{{- end }}
+#
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: {{ .Values.replicaCount }}
+  strategy:
+    type: RollingUpdate
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.templateAffinity" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+
+      containers:
+      - name: erpcmis-connector
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+        # -- NAPPL Connection Settings
+          {{- include "nplus.env" (dict 
+            "CMIS_AL_HOST"         ($.this.nappl).host
+            "CMIS_AL_PORT"         ($.this.nappl).port
+            "CMIS_AL_INSTANCE"     ($.this.nappl).instance
+            "CMIS_AL_SSL"          ($.this.nappl).ssl
+          ) | nindent 10 }}
+
+        #TODO: Manuel sagt, der Virusscanner würde noch nicht gehen, daher schalten wir den hier erstmal global ab.
+        # -- Virus Scanner Settings
+          {{- include "nplus.env" (dict 
+            "CONF_VIRUSSCAN_ACTIVE"         "false"
+            "CONF_VIRUSSCAN_TEMP_FOLDER"    ""
+            "CONF_VIRUSSCAN_SOCKPATH"       ""
+            "CONF_VIRUSSCAN_HOST"           ""
+            "CONF_VIRUSSCAN_PORT"           ""
+          ) | nindent 10 }}
+
+        {{- include "nplus.environment" . | nindent 8 }}
+        
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+        startupProbe:
+          initialDelaySeconds: 10
+          failureThreshold: 12
+          periodSeconds: 10
+          timeoutSeconds: 5
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+        #TODO: 9.3: Hier fehlt die echte Readiness Probe, die gibt es auch bei der CT nocht nicht.
+        readinessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          # initialDelaySeconds: 10
+          periodSeconds: 10
+        # -- Ceyoniq does currently not define an *official* livenessProbe, so we use
+        # one that quickly checks the main socket on Layer 4.
+        livenessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          # initialDelaySeconds: 10
+          periodSeconds: 10
+        {{- end }}
+        
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+          
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+
diff --git a/charts/erpcmis/templates/ingress.tpl b/charts/erpcmis/templates/ingress.tpl
new file mode 100644
index 0000000..293d27f
--- /dev/null
+++ b/charts/erpcmis/templates/ingress.tpl
@@ -0,0 +1,16 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/erpcmis/templates/networkpolicy.tpl b/charts/erpcmis/templates/networkpolicy.tpl
new file mode 100644
index 0000000..78faf3a
--- /dev/null
+++ b/charts/erpcmis/templates/networkpolicy.tpl
@@ -0,0 +1,35 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+
+  policyTypes:
+  - Ingress
+  - Egress
+
+  ingress:
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+
+  {{- include "nplus.networkpolicy.allowFromAdmin" . | nindent 2 }}
+  {{- include "nplus.networkpolicy.allowFromMon" . | nindent 2 }}
+
+  egress:
+  {{- include "nplus.networkpolicy.allowToNappl" . | nindent 2 }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/erpcmis/templates/pdb.tpl b/charts/erpcmis/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/erpcmis/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/erpcmis/templates/pvc.tpl b/charts/erpcmis/templates/pvc.tpl
new file mode 100644
index 0000000..b79132a
--- /dev/null
+++ b/charts/erpcmis/templates/pvc.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.pvc" . }}
diff --git a/charts/erpcmis/templates/service.tpl b/charts/erpcmis/templates/service.tpl
new file mode 100644
index 0000000..350f504
--- /dev/null
+++ b/charts/erpcmis/templates/service.tpl
@@ -0,0 +1,32 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service,
+  # access is purely through an ingress if desired.
+  type: ClusterIP
+  clusterIP: None
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
diff --git a/charts/erpcmis/values.schema.json b/charts/erpcmis/values.schema.json
new file mode 100644
index 0000000..47b2669
--- /dev/null
+++ b/charts/erpcmis/values.schema.json
@@ -0,0 +1,952 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "alien": {
+      "additionalProperties": false,
+      "properties": {
+        "doAppend": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "doAppend"
+        },
+        "port": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "port"
+        },
+        "server": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "server"
+        },
+        "ssl": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "ssl"
+        },
+        "url": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "url"
+        },
+        "useSign": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "useSign"
+        }
+      },
+      "title": "alien",
+      "type": "object"
+    },
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "erp-cmis-connector",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.2.1000.2024032720",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/cmis/browser",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "javaOpts": {
+      "additionalProperties": false,
+      "description": "Options for the Java VM",
+      "properties": {
+        "javaMaxMem": {
+          "default": "",
+          "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+          "title": "javaMaxMem"
+        },
+        "javaMaxRamPercentage": {
+          "default": "",
+          "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+          "title": "javaMaxRamPercentage"
+        },
+        "javaMinMem": {
+          "default": "",
+          "description": "set the minimum memory, java will consume",
+          "title": "javaMinMem"
+        },
+        "javaMisc": {
+          "default": "",
+          "description": "Any misc Java Options that need to be passed to the container",
+          "title": "javaMisc"
+        }
+      },
+      "title": "javaOpts"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "description": "defines internal constants for nplus. do not change these values",
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "java",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8096",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "8196",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "erpcmis-connector",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "erpcmis",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta"
+    },
+    "migration": {
+      "additionalProperties": false,
+      "properties": {
+        "checkDocuments": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "checkDocuments"
+        },
+        "checkIgnoreTime": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "checkIgnoreTime"
+        },
+        "delay": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "delay"
+        },
+        "doListMigration": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "doListMigration"
+        },
+        "enabled": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "enabled"
+        },
+        "fileDelimiter": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "fileDelimiter"
+        },
+        "viaFileSystem": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "viaFileSystem"
+        }
+      },
+      "title": "migration",
+      "type": "object"
+    },
+    "minReplicaCount": {
+      "default": "",
+      "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+      "title": "minReplicaCount"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-for-sap/erp-cmis/conf",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-for-sap/erp-cmis/logs",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-for-sap/erp-cmis/temp",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nappl": {
+      "additionalProperties": false,
+      "description": "The nscale Application Layer, this component should talk to",
+      "properties": {
+        "account": {
+          "default": "",
+          "description": "The technical account to login with",
+          "title": "account"
+        },
+        "domain": {
+          "default": "",
+          "description": "The domain of the technical account",
+          "title": "domain"
+        },
+        "host": {
+          "default": "",
+          "description": "nappl host name",
+          "title": "host"
+        },
+        "instance": {
+          "default": "",
+          "description": "instance of the Application Layer, likely `instance1`",
+          "title": "instance"
+        },
+        "password": {
+          "default": "",
+          "description": "The password of the technical accunt (if not set by secret)",
+          "title": "password"
+        },
+        "port": {
+          "default": "",
+          "description": "nappl port (http 8080 or https 8443)",
+          "title": "port"
+        },
+        "secret": {
+          "default": "",
+          "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+          "title": "secret"
+        },
+        "ssl": {
+          "default": "",
+          "description": "sets the Advanced Connect to tls",
+          "title": "ssl"
+        }
+      },
+      "title": "nappl"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "sign": {
+      "additionalProperties": false,
+      "properties": {
+        "authID": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "authID"
+        },
+        "keyAlias": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "keyAlias"
+        },
+        "keyPassword": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "keyPassword"
+        }
+      },
+      "title": "sign",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "updateStrategy": {
+      "default": "",
+      "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+      "title": "updateStrategy"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    },
+    "xsap": {
+      "additionalProperties": false,
+      "properties": {
+        "useSign": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+          "title": "useSign"
+        }
+      },
+      "title": "xsap",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/erpcmis/values.yaml b/charts/erpcmis/values.yaml
new file mode 100644
index 0000000..79b017f
--- /dev/null
+++ b/charts/erpcmis/values.yaml
@@ -0,0 +1,460 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: true
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/cmis/browser"
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# -- Sets the number of replicas in this replicaSet.
+# Some Components (like nstl or sharepoint) only allow a count of 1.
+replicaCount: 1
+# -- the update Strategy for this component. Normally, you can update all components
+# rolling, except for nappl, where you need to follow the documented update procedures.
+updateStrategy:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-for-sap/erp-cmis/temp"
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the temporary disk (all paths)
+    size: "1Gi"
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-for-sap/erp-cmis/conf"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-for-sap/erp-cmis/logs"
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size: "1Gi"
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path:
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+  file:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- Options for the Java VM
+javaOpts:
+  # -- set the percentage of RAM, Java will use of the total.
+  # The total amount is the amount installed in the K8s Cluster Node,
+  # OR the Memory Limit set (see resources), if any.
+  javaMaxRamPercentage:
+  # -- set the minimum memory, java will consume
+  javaMinMem:
+  # -- set the maximum memory, java will consume.
+  # Attention: This is NOT the real maximum and it does not include any non Java memory.
+  # Please read google, as this is highly discussed
+  javaMaxMem:
+  # -- Any misc Java Options that need to be passed to the container
+  javaMisc:
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: erp-cmis-connector
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- defines internal constants for nplus.
+# do not change these values
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: erpcmis
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8096
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https: 8196
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: java
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: erpcmis-connector
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- The nscale Application Layer, this component should talk to
+nappl:
+  # -- nappl host name
+  host:
+  # -- nappl port (http 8080 or https 8443)
+  port:
+  # -- sets the Advanced Connect to tls
+  ssl:
+  # -- instance of the Application Layer, likely `instance1`
+  instance:
+  # -- The technical account to login with
+  account:
+  # -- The domain of the technical account
+  domain:
+  # -- The password of the technical accunt (if not set by secret)
+  password:
+  # -- An optional secret that holds the credentials (the keys must be `account` and `password`)
+  secret:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCount, a podDesruptionBudget will be created with this value as
+# minAvailable, using the full component as selector. This is useful for components, that are
+# using multiple replicas.
+minReplicaCount:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+xsap:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  useSign:
+alien:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  server:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  port:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  url:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  useSign:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  ssl:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  doAppend:
+sign:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  keyAlias:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  keyPassword:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  authID:
+migration:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  enabled:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  delay:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  doListMigration:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  fileDelimiter:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  checkDocuments:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  checkIgnoreTime:
+  # -- Documentation pending until official release of the erp cmis image by *Ceyoniq*
+  viaFileSystem:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/erpproxy/Chart.yaml b/charts/erpproxy/Chart.yaml
new file mode 100644
index 0000000..087acc1
--- /dev/null
+++ b/charts/erpproxy/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-erpproxy
+description: nscale ERP Proxy, providing SAP Archive Link access to alien Archive Components
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/erpproxy/README.md b/charts/erpproxy/README.md
new file mode 100644
index 0000000..9c9858a
--- /dev/null
+++ b/charts/erpproxy/README.md
@@ -0,0 +1,197 @@
+
+
+# nplus-component-erpproxy
+
+nscale ERP Proxy, providing SAP Archive Link access to alien Archive Components
+
+## nplus-component-erpproxy Chart Configuration
+
+You can customize / configure nplus-component-erpproxy by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+**alien**&#8203;.doAppend | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**alien**&#8203;.port | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**alien**&#8203;.server | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**alien**&#8203;.ssl | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**alien**&#8203;.url | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**alien**&#8203;.useSign | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"sap-proxy-connector"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/pre-release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/sap_proxy"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**javaOpts**&#8203;.javaMaxMem | set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed |   |
+**javaOpts**&#8203;.javaMaxRamPercentage | set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any. |   |
+**javaOpts**&#8203;.javaMinMem | set the minimum memory, java will consume |   |
+**javaOpts**&#8203;.javaMisc | Any misc Java Options that need to be passed to the container |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"java"` |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8097` |
+**meta**&#8203;.ports&#8203;.https | The tls / https port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8197` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"erpproxy-connector"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"erpproxy"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+**migration**&#8203;.checkDocuments | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**migration**&#8203;.checkIgnoreTime | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**migration**&#8203;.delay | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**migration**&#8203;.doListMigration | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**migration**&#8203;.enabled | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**migration**&#8203;.fileDelimiter | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**migration**&#8203;.viaFileSystem | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+minReplicaCount | if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas. |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-for-sap/sap-proxy/conf"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.logs&#8203;.path | Sets the path to the log files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-for-sap/sap-proxy/logs"` |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |  `"1Gi"` |
+**mounts**&#8203;.temp&#8203;.path | Sets the path to the temporary files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-for-sap/sap-proxy/temp"` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"1Gi"` |
+nameOverride | This overrides the output of the internal name function |   |
+**nappl**&#8203;.account | The technical account to login with |   |
+**nappl**&#8203;.domain | The domain of the technical account |   |
+**nappl**&#8203;.host | nappl host name |   |
+**nappl**&#8203;.instance | instance of the Application Layer, likely `instance1` |   |
+**nappl**&#8203;.password | The password of the technical accunt (if not set by secret) |   |
+**nappl**&#8203;.port | nappl port (http 8080 or https 8443) |   |
+**nappl**&#8203;.secret | An optional secret that holds the credentials (the keys must be `account` and `password`) |   |
+**nappl**&#8203;.ssl | sets the Advanced Connect to tls |   |
+nodeSelector | select specific nodes for this component |   |
+replicaCount | Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1. |  `1` |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**sign**&#8203;.authID | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**sign**&#8203;.keyAlias | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**sign**&#8203;.keyPassword | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+updateStrategy | the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures. |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+**xsap**&#8203;.url | xsap url to use. |  `"{{ printf \"%s/%s\" ($.this.nappl).instance \"xsap/cs/xsap\"}}"` |
+**xsap**&#8203;.useSign | Documentation pending until official release of the erp proxy image by *Ceyoniq* |   |
+
diff --git a/charts/erpproxy/compose.yaml b/charts/erpproxy/compose.yaml
new file mode 100644
index 0000000..e62b2f8
--- /dev/null
+++ b/charts/erpproxy/compose.yaml
@@ -0,0 +1,45 @@
+networks:
+  nscale:
+
+services:
+  erp-proxy:
+    image: ceyoniq.azurecr.io/release/nscale/sap-proxy-connector:ubi.9.2.1500.2024090301
+    volumes:
+      - ./license.xml:/opt/ceyoniq/nscale-for-sap/sap-proxy/conf/license.xml:ro
+      - ./dsaKeystore.ks:/opt/ceyoniq/nscale-for-sap/sap-proxy/bin/dsaKeystore.ks:rw
+      - ./log4j2_stdout.xml:/opt/ceyoniq/nscale-for-sap/sap-proxy/temp/tomcat.8097/conf/log4j2.xml:ro
+      - ./log4j2_stdout.xml:/opt/ceyoniq/nscale-for-sap/sap-proxy/conf/log4j2.xml:ro
+      - ./sap_proxy:/opt/ceyoniq/nscale-for-sap/sap-proxy/temp/tomcat.8097/work/nscaleSapProxy/localhost/sap_proxy:rw
+    environment:
+      # target system
+      - SAPPROXY_XSAP_SERVER=10.1.150.133
+      - SAPPROXY_XSAP_PORT=8080
+      - SAPPROXY_XSAP_URL=nscalealinst1/xsap/cs/xsap
+      - SAPPROXY_XSAP_USE_SIGN=false
+      - SAPPROXY_XSAP_USE_SSL=false
+      # source system
+      - SAPPROXY_ALIEN_SERVER=10.1.150.133
+      - SAPPROXY_ALIEN_PORT=8082
+      - SAPPROXY_ALIEN_URL=ctsapcs/ContentService
+      - SAPPROXY_ALIEN_USE_SIGN=false
+      - SAPPROXY_ALIEN_USE_SSL=false
+      - SAPPROXY_ALIEN_DO_APPEND=false
+      # signature check
+      - SAPPROXY_SIGN_KEY_ALIAS=sap_proxy
+      - SAPPROXY_SIGN_KEY_PASSWORD=drowssap
+      - SAPPROXY_SIGN_AUTHID=CN\=Test Leerzeichen,OU\=Test
+      # migration
+      - SAPPROXY_MIGRATION_DO_MIGRATION=false
+      - SAPPROXY_MIGRATION_DELAY_SEC=30
+      - SAPPROXY_MIGRATION_DO_LIST_MIGRATION=false
+      - SAPPROXY_MIGRATION_FILE_DELIMITER=_
+      - SAPPROXY_MIGRATION_CHECK_DOCUMENTS=false
+      - SAPPROXY_MIGRATION_CHECK_IGNORETIME=true
+      - SAPPROXY_MIGRATION_VIA_FILESYSTEM=false
+      # servlet path, must only be changed if web.xml is changed accordingly
+      - SAPPROXY_SERVLET_PATH=sap_proxy/ContentService
+    ports:
+      - "8097:8097" # HTTP
+      - "8197:8197" # HTTPS
+    networks:
+      - nscale
diff --git a/charts/erpproxy/templates/component.tpl b/charts/erpproxy/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/erpproxy/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/erpproxy/templates/deployment.tpl b/charts/erpproxy/templates/deployment.tpl
new file mode 100644
index 0000000..7776cc4
--- /dev/null
+++ b/charts/erpproxy/templates/deployment.tpl
@@ -0,0 +1,134 @@
+{{- include "nplus.init" $ -}}
+# Component: {{ .component.chartName }}
+# will connect to:
+{{- if (.this.nappl).host }}
+#   nappl: {{ if ($.this.nappl).ssl -}}https{{- else -}}http{{- end -}}://{{ ($.this.nappl).host }}:{{ (.this.nappl).port }}/{{ (.this.nappl).instance }}
+{{- else }}
+#   defined by config file in conf PV.
+{{- end }}
+#
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: {{ .Values.replicaCount }}
+  strategy:
+    type: RollingUpdate
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.templateAffinity" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+
+      containers:
+      - name: erpproxy-connector
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+          # -- NAPPL Connection Settings
+          # TODO: Die URL nach außen führen
+          {{- include "nplus.env" (dict 
+            "SAPPROXY_XSAP_SERVER"        ($.this.nappl).host
+            "SAPPROXY_XSAP_PORT"          ($.this.nappl).port
+            "SAPPROXY_XSAP_URL"           ($.this.nappl).url
+            "SAPPROXY_XSAP_USE_SSL"       ($.this.nappl).ssl
+          ) | nindent 10 }}
+
+          # -- XSAP Settings
+          {{- include "nplus.env" (dict 
+            "SAPPROXY_XSAP_USE_SIGN"      ($.this.xsap).useSign
+          ) | nindent 10 }}
+
+          # -- Alien Settings
+          {{- include "nplus.env" (dict 
+            "SAPPROXY_ALIEN_SERVER"       ($.this.alien).server
+            "SAPPROXY_ALIEN_PORT"         ($.this.alien).port
+            "SAPPROXY_ALIEN_URL"          ($.this.alien).url
+            "SAPPROXY_ALIEN_USE_SIGN"     ($.this.alien).useSign
+            "SAPPROXY_ALIEN_USE_SSL"      ($.this.alien).ssl
+            "SAPPROXY_ALIEN_DO_APPEND"    ($.this.alien).doAppend
+          ) | nindent 10 }}
+
+          # -- Signature Check Settings
+          {{- include "nplus.env" (dict 
+            "SAPPROXY_SIGN_KEY_ALIAS"     ($.this.sign).keyAlias
+            "SAPPROXY_SIGN_KEY_PASSWORD"  ($.this.sign).keyPassword
+            "SAPPROXY_SIGN_AUTHID"        ($.this.sign).authID
+          ) | nindent 10 }}
+
+          # -- Migration Settings
+          {{- include "nplus.env" (dict 
+            "SAPPROXY_MIGRATION_DO_MIGRATION"       ($.this.migration).enabled
+            "SAPPROXY_MIGRATION_DELAY_SEC"          ($.this.migration).delay
+            "SAPPROXY_MIGRATION_DO_LIST_MIGRATION"  ($.this.migration).doListMigration
+            "SAPPROXY_MIGRATION_FILE_DELIMITER"     ($.this.migration).fileDelimiter
+            "SAPPROXY_MIGRATION_CHECK_DOCUMENTS"    ($.this.migration).checkDocuments
+            "SAPPROXY_MIGRATION_CHECK_IGNORETIME"   ($.this.migration).checkIgnoreTime
+            "SAPPROXY_MIGRATION_VIA_FILESYSTEM"     ($.this.migration).viaFileSystem
+          ) | nindent 10 }}
+
+        {{- include "nplus.environment" . | nindent 8 }}
+        
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+        startupProbe:
+          initialDelaySeconds: 10
+          failureThreshold: 12
+          periodSeconds: 10
+          timeoutSeconds: 5
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+        #TODO: 9.3: Hier fehlt die echte Readiness Probe, die gibt es auch bei der CT nocht nicht.
+        readinessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          # initialDelaySeconds: 20
+          periodSeconds: 10
+        # -- Ceyoniq does currently not define an *official* livenessProbe, so we use
+        # one that quickly checks the main socket on Layer 4.
+        livenessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          # initialDelaySeconds: 20
+          periodSeconds: 10
+        {{- end }}
+        
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+          
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+
diff --git a/charts/erpproxy/templates/ingress.tpl b/charts/erpproxy/templates/ingress.tpl
new file mode 100644
index 0000000..293d27f
--- /dev/null
+++ b/charts/erpproxy/templates/ingress.tpl
@@ -0,0 +1,16 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/erpproxy/templates/networkpolicy.tpl b/charts/erpproxy/templates/networkpolicy.tpl
new file mode 100644
index 0000000..78faf3a
--- /dev/null
+++ b/charts/erpproxy/templates/networkpolicy.tpl
@@ -0,0 +1,35 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+
+  policyTypes:
+  - Ingress
+  - Egress
+
+  ingress:
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+
+  {{- include "nplus.networkpolicy.allowFromAdmin" . | nindent 2 }}
+  {{- include "nplus.networkpolicy.allowFromMon" . | nindent 2 }}
+
+  egress:
+  {{- include "nplus.networkpolicy.allowToNappl" . | nindent 2 }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/erpproxy/templates/pdb.tpl b/charts/erpproxy/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/erpproxy/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/erpproxy/templates/pvc.tpl b/charts/erpproxy/templates/pvc.tpl
new file mode 100644
index 0000000..b79132a
--- /dev/null
+++ b/charts/erpproxy/templates/pvc.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.pvc" . }}
diff --git a/charts/erpproxy/templates/service.tpl b/charts/erpproxy/templates/service.tpl
new file mode 100644
index 0000000..350f504
--- /dev/null
+++ b/charts/erpproxy/templates/service.tpl
@@ -0,0 +1,32 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service,
+  # access is purely through an ingress if desired.
+  type: ClusterIP
+  clusterIP: None
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
diff --git a/charts/erpproxy/values.schema.json b/charts/erpproxy/values.schema.json
new file mode 100644
index 0000000..06bf202
--- /dev/null
+++ b/charts/erpproxy/values.schema.json
@@ -0,0 +1,957 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "alien": {
+      "additionalProperties": false,
+      "properties": {
+        "doAppend": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "doAppend"
+        },
+        "port": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "port"
+        },
+        "server": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "server"
+        },
+        "ssl": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "ssl"
+        },
+        "url": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "url"
+        },
+        "useSign": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "useSign"
+        }
+      },
+      "title": "alien",
+      "type": "object"
+    },
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "sap-proxy-connector",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/pre-release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.3.1000.2024092409",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/sap_proxy",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "javaOpts": {
+      "additionalProperties": false,
+      "description": "Options for the Java VM",
+      "properties": {
+        "javaMaxMem": {
+          "default": "",
+          "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+          "title": "javaMaxMem"
+        },
+        "javaMaxRamPercentage": {
+          "default": "",
+          "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+          "title": "javaMaxRamPercentage"
+        },
+        "javaMinMem": {
+          "default": "",
+          "description": "set the minimum memory, java will consume",
+          "title": "javaMinMem"
+        },
+        "javaMisc": {
+          "default": "",
+          "description": "Any misc Java Options that need to be passed to the container",
+          "title": "javaMisc"
+        }
+      },
+      "title": "javaOpts"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "description": "defines internal constants for nplus. do not change these values",
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "java",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8097",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "8197",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "erpproxy-connector",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "erpproxy",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta"
+    },
+    "migration": {
+      "additionalProperties": false,
+      "properties": {
+        "checkDocuments": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "checkDocuments"
+        },
+        "checkIgnoreTime": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "checkIgnoreTime"
+        },
+        "delay": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "delay"
+        },
+        "doListMigration": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "doListMigration"
+        },
+        "enabled": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "enabled"
+        },
+        "fileDelimiter": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "fileDelimiter"
+        },
+        "viaFileSystem": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "viaFileSystem"
+        }
+      },
+      "title": "migration",
+      "type": "object"
+    },
+    "minReplicaCount": {
+      "default": "",
+      "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+      "title": "minReplicaCount"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-for-sap/sap-proxy/conf",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-for-sap/sap-proxy/logs",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-for-sap/sap-proxy/temp",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nappl": {
+      "additionalProperties": false,
+      "description": "The nscale Application Layer, this component should talk to",
+      "properties": {
+        "account": {
+          "default": "",
+          "description": "The technical account to login with",
+          "title": "account"
+        },
+        "domain": {
+          "default": "",
+          "description": "The domain of the technical account",
+          "title": "domain"
+        },
+        "host": {
+          "default": "",
+          "description": "nappl host name",
+          "title": "host"
+        },
+        "instance": {
+          "default": "",
+          "description": "instance of the Application Layer, likely `instance1`",
+          "title": "instance"
+        },
+        "password": {
+          "default": "",
+          "description": "The password of the technical accunt (if not set by secret)",
+          "title": "password"
+        },
+        "port": {
+          "default": "",
+          "description": "nappl port (http 8080 or https 8443)",
+          "title": "port"
+        },
+        "secret": {
+          "default": "",
+          "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+          "title": "secret"
+        },
+        "ssl": {
+          "default": "",
+          "description": "sets the Advanced Connect to tls",
+          "title": "ssl"
+        }
+      },
+      "title": "nappl"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "sign": {
+      "additionalProperties": false,
+      "properties": {
+        "authID": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "authID"
+        },
+        "keyAlias": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "keyAlias"
+        },
+        "keyPassword": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "keyPassword"
+        }
+      },
+      "title": "sign",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "updateStrategy": {
+      "default": "",
+      "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+      "title": "updateStrategy"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    },
+    "xsap": {
+      "additionalProperties": false,
+      "properties": {
+        "url": {
+          "default": "{{ printf \"%s/%s\" ($.this.nappl).instance \"xsap/cs/xsap\"}}",
+          "description": "xsap url to use.",
+          "title": "url"
+        },
+        "useSign": {
+          "default": "",
+          "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+          "title": "useSign"
+        }
+      },
+      "title": "xsap",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/erpproxy/values.yaml b/charts/erpproxy/values.yaml
new file mode 100644
index 0000000..003a5d3
--- /dev/null
+++ b/charts/erpproxy/values.yaml
@@ -0,0 +1,462 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: true
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/sap_proxy"
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# -- Sets the number of replicas in this replicaSet.
+# Some Components (like nstl or sharepoint) only allow a count of 1.
+replicaCount: 1
+# -- the update Strategy for this component. Normally, you can update all components
+# rolling, except for nappl, where you need to follow the documented update procedures.
+updateStrategy:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-for-sap/sap-proxy/temp"
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the temporary disk (all paths)
+    size: "1Gi"
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-for-sap/sap-proxy/conf"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-for-sap/sap-proxy/logs"
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size: "1Gi"
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path:
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+  file:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- Options for the Java VM
+javaOpts:
+  # -- set the percentage of RAM, Java will use of the total.
+  # The total amount is the amount installed in the K8s Cluster Node,
+  # OR the Memory Limit set (see resources), if any.
+  javaMaxRamPercentage:
+  # -- set the minimum memory, java will consume
+  javaMinMem:
+  # -- set the maximum memory, java will consume.
+  # Attention: This is NOT the real maximum and it does not include any non Java memory.
+  # Please read google, as this is highly discussed
+  javaMaxMem:
+  # -- Any misc Java Options that need to be passed to the container
+  javaMisc:
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: sap-proxy-connector
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/pre-release/nscale
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- defines internal constants for nplus.
+# do not change these values
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: erpproxy
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8097
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https: 8197
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: java
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: erpproxy-connector
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- The nscale Application Layer, this component should talk to
+nappl:
+  # -- nappl host name
+  host:
+  # -- nappl port (http 8080 or https 8443)
+  port:
+  # -- sets the Advanced Connect to tls
+  ssl:
+  # -- instance of the Application Layer, likely `instance1`
+  instance:
+  # -- The technical account to login with
+  account:
+  # -- The domain of the technical account
+  domain:
+  # -- The password of the technical accunt (if not set by secret)
+  password:
+  # -- An optional secret that holds the credentials (the keys must be `account` and `password`)
+  secret:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCount, a podDesruptionBudget will be created with this value as
+# minAvailable, using the full component as selector. This is useful for components, that are
+# using multiple replicas.
+minReplicaCount:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+xsap:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  useSign:
+  # -- xsap url to use.
+  url: '{{ printf "%s/%s" ($.this.nappl).instance "xsap/cs/xsap"}}'
+alien:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  server:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  port:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  url:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  useSign:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  ssl:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  doAppend:
+sign:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  keyAlias:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  keyPassword:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  authID:
+migration:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  enabled:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  delay:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  doListMigration:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  fileDelimiter:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  checkDocuments:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  checkIgnoreTime:
+  # -- Documentation pending until official release of the erp proxy image by *Ceyoniq*
+  viaFileSystem:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/ilm/Chart.yaml b/charts/ilm/Chart.yaml
new file mode 100644
index 0000000..3dbca65
--- /dev/null
+++ b/charts/ilm/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-ilm
+description: nscale ILM Connector, providing a certified SAP ILM interface
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/ilm/README.md b/charts/ilm/README.md
new file mode 100644
index 0000000..c5ac7f9
--- /dev/null
+++ b/charts/ilm/README.md
@@ -0,0 +1,179 @@
+
+
+# nplus-component-ilm
+
+nscale ILM Connector, providing a certified SAP ILM interface
+
+## nplus-component-ilm Chart Configuration
+
+You can customize / configure nplus-component-ilm by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"ilm-connector"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/sap_ilm"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**javaOpts**&#8203;.javaMaxMem | set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed |   |
+**javaOpts**&#8203;.javaMaxRamPercentage | set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any. |   |
+**javaOpts**&#8203;.javaMinMem | set the minimum memory, java will consume |   |
+**javaOpts**&#8203;.javaMisc | Any misc Java Options that need to be passed to the container |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"java"` |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8297` |
+**meta**&#8203;.ports&#8203;.https | The tls / https port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8397` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"ilm-connector"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"ilm"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCount | if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas. |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/conf"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.logs&#8203;.path | Sets the path to the log files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/logs"` |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |  `"1Gi"` |
+**mounts**&#8203;.temp&#8203;.path | Sets the path to the temporary files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/temp"` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"1Gi"` |
+nameOverride | This overrides the output of the internal name function |   |
+**nappl**&#8203;.account | The technical account to login with |   |
+**nappl**&#8203;.domain | The domain of the technical account |   |
+**nappl**&#8203;.host | nappl host name |   |
+**nappl**&#8203;.instance | instance of the Application Layer, likely `instance1` |   |
+**nappl**&#8203;.password | The password of the technical accunt (if not set by secret) |   |
+**nappl**&#8203;.port | nappl port (http 8080 or https 8443) |   |
+**nappl**&#8203;.secret | An optional secret that holds the credentials (the keys must be `account` and `password`) |   |
+**nappl**&#8203;.ssl | sets the Advanced Connect to tls |   |
+nodeSelector | select specific nodes for this component |   |
+replicaCount | Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1. |  `1` |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+updateStrategy | the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures. |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+
diff --git a/charts/ilm/templates/component.tpl b/charts/ilm/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/ilm/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/ilm/templates/deployment.tpl b/charts/ilm/templates/deployment.tpl
new file mode 100644
index 0000000..5f4671b
--- /dev/null
+++ b/charts/ilm/templates/deployment.tpl
@@ -0,0 +1,106 @@
+{{- include "nplus.init" $ -}}
+# Component: {{ .component.chartName }}
+# will connect to:
+{{- if (.this.nappl).host }}
+#   nappl: {{ if ($.this.nappl).ssl -}}https{{- else -}}http{{- end -}}://{{ ($.this.nappl).host }}:{{ (.this.nappl).port }}/{{ (.this.nappl).instance }}
+{{- else }}
+#   defined by config file in conf PV.
+{{- end }}
+#
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: {{ .Values.replicaCount }}
+  strategy:
+    type: RollingUpdate
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.templateAffinity" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+
+      containers:
+      - name: ilm-connector
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+        # -- NAPPL Connection Settings
+          {{- include "nplus.env" (dict 
+            "ILM_AL_HOST"         ($.this.nappl).host
+            "ILM_AL_PORT"         ($.this.nappl).port
+            "ILM_AL_INSTANCE"     ($.this.nappl).instance
+            "ILM_AL_SSL"          ($.this.nappl).ssl
+          ) | nindent 10 }}
+        # -- NAPPL Connection Credentials
+          {{- include "nplus.envCredentials" (list
+            "ILM_AL_USER"         ($.this.nappl).account
+            "ILM_AL_PASSWORD"     ($.this.nappl).password
+                                  ($.this.nappl).secret
+          ) | nindent 10 }}
+
+        {{- include "nplus.environment" . | nindent 8 }}
+        
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+        startupProbe:
+          initialDelaySeconds: 10
+          failureThreshold: 12
+          periodSeconds: 10
+          timeoutSeconds: 5
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+        #TODO: 9.3: Hier fehlt die echte Readiness Probe, die gibt es auch bei der CT nocht nicht.
+        readinessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          # initialDelaySeconds: 20
+          periodSeconds: 10
+        # -- Ceyoniq does currently not define an *official* livenessProbe, so we use
+        # one that quickly checks the main socket on Layer 4.
+        livenessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          # initialDelaySeconds: 20
+          periodSeconds: 10
+        {{- end }}
+        
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+          
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+
diff --git a/charts/ilm/templates/ingress.tpl b/charts/ilm/templates/ingress.tpl
new file mode 100644
index 0000000..293d27f
--- /dev/null
+++ b/charts/ilm/templates/ingress.tpl
@@ -0,0 +1,16 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/ilm/templates/networkpolicy.tpl b/charts/ilm/templates/networkpolicy.tpl
new file mode 100644
index 0000000..78faf3a
--- /dev/null
+++ b/charts/ilm/templates/networkpolicy.tpl
@@ -0,0 +1,35 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+
+  policyTypes:
+  - Ingress
+  - Egress
+
+  ingress:
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+
+  {{- include "nplus.networkpolicy.allowFromAdmin" . | nindent 2 }}
+  {{- include "nplus.networkpolicy.allowFromMon" . | nindent 2 }}
+
+  egress:
+  {{- include "nplus.networkpolicy.allowToNappl" . | nindent 2 }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/ilm/templates/pdb.tpl b/charts/ilm/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/ilm/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/ilm/templates/pvc.tpl b/charts/ilm/templates/pvc.tpl
new file mode 100644
index 0000000..b79132a
--- /dev/null
+++ b/charts/ilm/templates/pvc.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.pvc" . }}
diff --git a/charts/ilm/templates/service.tpl b/charts/ilm/templates/service.tpl
new file mode 100644
index 0000000..350f504
--- /dev/null
+++ b/charts/ilm/templates/service.tpl
@@ -0,0 +1,32 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service,
+  # access is purely through an ingress if desired.
+  type: ClusterIP
+  clusterIP: None
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
diff --git a/charts/ilm/values.schema.json b/charts/ilm/values.schema.json
new file mode 100644
index 0000000..adacf00
--- /dev/null
+++ b/charts/ilm/values.schema.json
@@ -0,0 +1,839 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "ilm-connector",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.3.1000.2024091702",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/sap_ilm",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "javaOpts": {
+      "additionalProperties": false,
+      "description": "Options for the Java VM",
+      "properties": {
+        "javaMaxMem": {
+          "default": "",
+          "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+          "title": "javaMaxMem"
+        },
+        "javaMaxRamPercentage": {
+          "default": "",
+          "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+          "title": "javaMaxRamPercentage"
+        },
+        "javaMinMem": {
+          "default": "",
+          "description": "set the minimum memory, java will consume",
+          "title": "javaMinMem"
+        },
+        "javaMisc": {
+          "default": "",
+          "description": "Any misc Java Options that need to be passed to the container",
+          "title": "javaMisc"
+        }
+      },
+      "title": "javaOpts"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "description": "defines internal constants for nplus. do not change these values",
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "java",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8297",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "8397",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "ilm-connector",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "ilm",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta"
+    },
+    "minReplicaCount": {
+      "default": "",
+      "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+      "title": "minReplicaCount"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/conf",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/logs",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/temp",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nappl": {
+      "additionalProperties": false,
+      "description": "The nscale Application Layer, this component should talk to",
+      "properties": {
+        "account": {
+          "default": "",
+          "description": "The technical account to login with",
+          "title": "account"
+        },
+        "domain": {
+          "default": "",
+          "description": "The domain of the technical account",
+          "title": "domain"
+        },
+        "host": {
+          "default": "",
+          "description": "nappl host name",
+          "title": "host"
+        },
+        "instance": {
+          "default": "",
+          "description": "instance of the Application Layer, likely `instance1`",
+          "title": "instance"
+        },
+        "password": {
+          "default": "",
+          "description": "The password of the technical accunt (if not set by secret)",
+          "title": "password"
+        },
+        "port": {
+          "default": "",
+          "description": "nappl port (http 8080 or https 8443)",
+          "title": "port"
+        },
+        "secret": {
+          "default": "",
+          "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+          "title": "secret"
+        },
+        "ssl": {
+          "default": "",
+          "description": "sets the Advanced Connect to tls",
+          "title": "ssl"
+        }
+      },
+      "title": "nappl"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "updateStrategy": {
+      "default": "",
+      "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+      "title": "updateStrategy"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/ilm/values.yaml b/charts/ilm/values.yaml
new file mode 100644
index 0000000..7326331
--- /dev/null
+++ b/charts/ilm/values.yaml
@@ -0,0 +1,422 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: true
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/sap_ilm"
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# -- Sets the number of replicas in this replicaSet.
+# Some Components (like nstl or sharepoint) only allow a count of 1.
+replicaCount: 1
+# -- the update Strategy for this component. Normally, you can update all components
+# rolling, except for nappl, where you need to follow the documented update procedures.
+updateStrategy:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/temp"
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the temporary disk (all paths)
+    size: "1Gi"
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/conf"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/logs"
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size: "1Gi"
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path:
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+  file:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- Options for the Java VM
+javaOpts:
+  # -- set the percentage of RAM, Java will use of the total.
+  # The total amount is the amount installed in the K8s Cluster Node,
+  # OR the Memory Limit set (see resources), if any.
+  javaMaxRamPercentage:
+  # -- set the minimum memory, java will consume
+  javaMinMem:
+  # -- set the maximum memory, java will consume.
+  # Attention: This is NOT the real maximum and it does not include any non Java memory.
+  # Please read google, as this is highly discussed
+  javaMaxMem:
+  # -- Any misc Java Options that need to be passed to the container
+  javaMisc:
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: ilm-connector
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- defines internal constants for nplus.
+# do not change these values
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: ilm
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8297
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https: 8397
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: java
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: ilm-connector
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- The nscale Application Layer, this component should talk to
+nappl:
+  # -- nappl host name
+  host:
+  # -- nappl port (http 8080 or https 8443)
+  port:
+  # -- sets the Advanced Connect to tls
+  ssl:
+  # -- instance of the Application Layer, likely `instance1`
+  instance:
+  # -- The technical account to login with
+  account:
+  # -- The domain of the technical account
+  domain:
+  # -- The password of the technical accunt (if not set by secret)
+  password:
+  # -- An optional secret that holds the credentials (the keys must be `account` and `password`)
+  secret:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCount, a podDesruptionBudget will be created with this value as
+# minAvailable, using the full component as selector. This is useful for components, that are
+# using multiple replicas.
+minReplicaCount:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/instance-argo/Chart.yaml b/charts/instance-argo/Chart.yaml
new file mode 100644
index 0000000..fe954b2
--- /dev/null
+++ b/charts/instance-argo/Chart.yaml
@@ -0,0 +1,16 @@
+apiVersion: v2
+name: nplus-instance-argo
+description: nplus Instance ArgoCD Edition, supporting the deployment of npus Instances through ArgoCD
+icon: data:image/svg+xml;base64,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
+type: application
+home: "https://git.nplus.cloud"
+maintainers:
+  - email: a.ahmann@4i.org
+    name: Andreas Ahmann
+    url: "https://www.nplus.cloud"
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/instance-argo/README.md b/charts/instance-argo/README.md
new file mode 100644
index 0000000..e141a90
--- /dev/null
+++ b/charts/instance-argo/README.md
@@ -0,0 +1,93 @@
+
+
+# nplus-instance-argo
+
+nplus Instance ArgoCD Edition, supporting the deployment of npus Instances through ArgoCD
+
+## nplus-instance-argo Chart Configuration
+
+You can customize / configure nplus-instance-argo by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+**argocd**&#8203;.chart | The name of the chart to use for the instance |  `"nplus-instance"` |
+**argocd**&#8203;.destinationNamespace | ArgoCD can deploy to any Namespace on the destination Server. You have to specify it. Default is the release namespace |  `"{{ .Release.Namespace }}"` |
+**argocd**&#8203;.destinationServer | ArgoCD can also remote deploy Applications to alien clusters. The server specifies the API Endpoint of the Cluster, where the Application should be deployed |  `"https://kubernetes.default.svc"` |
+**argocd**&#8203;.namespace | The ArgoCD Namespace within the cluster. The ArgoCD Application will be deployed to this namespace You will need write privileges for this namespace |  `"argocd"` |
+**argocd**&#8203;.project | ArgoCD organizes Applications in Projects. This is the name of the project, the application should be deployed to |  `"default"` |
+**argocd**&#8203;.prune | Toggle pruning for this Application |  `true` |
+**argocd**&#8203;.repo | Specifiy the helm repo, from which ArgoCD should load the chart. Please make sure ArgoCD gets access rights to this repo |  `"https://git.nplus.cloud"` |
+**argocd**&#8203;.selfHeal | Toggle self healing feature for this Application |  `true` |
+**global**&#8203;.meta&#8203;.isArgo | specifies that this is an Argo Installation. Used to determine the correct handler in the chart <br>Do not change | **info only**, do not change<br> `true` |
+
diff --git a/charts/instance-argo/templates/application.tpl b/charts/instance-argo/templates/application.tpl
new file mode 100644
index 0000000..3205faa
--- /dev/null
+++ b/charts/instance-argo/templates/application.tpl
@@ -0,0 +1,41 @@
+{{- include "nplus.initOnly" $ -}}
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: {{ .Release.Name }}
+  namespace: {{ (.this.argocd).namespace }}
+  labels:
+    # Common Kubernetes Lables are not allowed here for ArgoCD Application Manifests,
+    # as ArgoCD then tries to immediately delete the synced Application
+    # so we just use minimal Labels, which are the selectorLabels
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  finalizers:
+    # The default behaviour is foreground cascading deletion
+    # - resources-finalizer.argocd.argoproj.io
+    # Alternatively, you can use background cascading deletion
+    - resources-finalizer.argocd.argoproj.io/background
+spec:
+  {{- if or (.this.argocd).selfHeal (.this.argocd).prune }}
+  syncPolicy:
+    automated:
+      {{- if (.this.argocd).selfHeal }}
+      selfHeal: {{ (.this.argocd).selfHeal }}
+      {{- end }}
+      {{- if (.this.argocd).prune }}
+      prune: {{ (.this.argocd).prune }}
+      {{- end }}
+  {{- end }}
+  {{- if (.this.argocd).project }}
+  project: {{ (.this.argocd).project }}
+  {{- end }}
+  source:
+    chart: {{ required "you must set the name of the chart to use" (.this.argocd).chart }}
+    targetRevision: "{{ .Chart.Version }}"
+    repoURL: {{ required "you must set the repo url to your charts repo" (.this.argocd).repo | quote }}
+    helm:
+      releaseName: {{ .Release.Name }}
+      values: | 
+        {{- toYaml (omit .Values "globals" "argocd") | nindent 8 }}
+  destination:
+    server: {{ tpl (required "you must set the name of the destination server" ((.this.argocd).destinationServer | default (.this.argocd).server)) . | quote }}
+    namespace: {{ tpl (required "you must set the name of the destination namespace" (.this.argocd).destinationNamespace) . | quote }}
diff --git a/charts/instance-argo/values.schema.json b/charts/instance-argo/values.schema.json
new file mode 100644
index 0000000..d5f3e99
--- /dev/null
+++ b/charts/instance-argo/values.schema.json
@@ -0,0 +1,85 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "argocd": {
+      "additionalProperties": false,
+      "properties": {
+        "chart": {
+          "default": "nplus-instance",
+          "description": "The name of the chart to use for the instance",
+          "title": "chart"
+        },
+        "destinationNamespace": {
+          "default": "{{ .Release.Namespace }}",
+          "description": "ArgoCD can deploy to any Namespace on the destination Server. You have to specify it. Default is the release namespace",
+          "title": "destinationNamespace"
+        },
+        "destinationServer": {
+          "default": "https://kubernetes.default.svc",
+          "description": "ArgoCD can also remote deploy Applications to alien clusters. The server specifies the API Endpoint of the Cluster, where the Application should be deployed",
+          "title": "destinationServer"
+        },
+        "namespace": {
+          "default": "argocd",
+          "description": "The ArgoCD Namespace within the cluster. The ArgoCD Application will be deployed to this namespace You will need write privileges for this namespace",
+          "title": "namespace"
+        },
+        "project": {
+          "default": "default",
+          "description": "ArgoCD organizes Applications in Projects. This is the name of the project, the application should be deployed to",
+          "title": "project"
+        },
+        "prune": {
+          "default": "true",
+          "description": "Toggle pruning for this Application",
+          "title": "prune"
+        },
+        "repo": {
+          "default": "https://git.nplus.cloud",
+          "description": "Specifiy the helm repo, from which ArgoCD should load the chart. Please make sure ArgoCD gets access rights to this repo",
+          "title": "repo"
+        },
+        "selfHeal": {
+          "default": "true",
+          "description": "Toggle self healing feature for this Application",
+          "title": "selfHeal"
+        }
+      },
+      "title": "argocd",
+      "type": "object"
+    },
+    "global": {
+      "additionalProperties": false,
+      "properties": {
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "isArgo": {
+              "default": "true",
+              "description": "specifies that this is an Argo Installation. Used to determine the correct handler in the chart @internal -- Do not change",
+              "title": "isArgo"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        }
+      },
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/instance-argo/values.yaml b/charts/instance-argo/values.yaml
new file mode 100644
index 0000000..611801b
--- /dev/null
+++ b/charts/instance-argo/values.yaml
@@ -0,0 +1,26 @@
+# yaml-language-server: $schema=values.schema.json
+argocd:
+  # -- The name of the chart to use for the instance
+  chart: nplus-instance
+  # -- The ArgoCD Namespace within the cluster. The ArgoCD Application will be deployed to this namespace
+  # You will need write privileges for this namespace
+  namespace: argocd
+  # -- ArgoCD organizes Applications in Projects. This is the name of the project, the application should be deployed to
+  project: default
+  # -- ArgoCD can also remote deploy Applications to alien clusters. The server specifies the API Endpoint of the Cluster, where
+  # the Application should be deployed
+  destinationServer: "https://kubernetes.default.svc"
+  # -- ArgoCD can deploy to any Namespace on the destination Server. You have to specify it.
+  # Default is the release namespace
+  destinationNamespace: "{{ .Release.Namespace }}"
+  # -- Toggle self healing feature for this Application
+  selfHeal: true
+  # -- Toggle pruning for this Application
+  prune: true
+  # -- Specifiy the helm repo, from which ArgoCD should load the chart. Please make sure ArgoCD gets access rights to this repo
+  repo: "https://git.nplus.cloud"
+global:
+  meta:
+    # -- specifies that this is an Argo Installation. Used to determine the correct handler in the chart
+    # @internal -- Do not change
+    isArgo: true
diff --git a/charts/instance/Chart.yaml b/charts/instance/Chart.yaml
new file mode 100644
index 0000000..ed733c2
--- /dev/null
+++ b/charts/instance/Chart.yaml
@@ -0,0 +1,186 @@
+apiVersion: v2
+name: nplus-instance
+description: nplus Instance, an umbrella chart for orchestrating the components in a nplus Instance
+icon: data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4KPHN2ZyB2ZXJzaW9uPSIxLjEiIGlkPSJFYmVuZV8xIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB4PSIwcHgiIHk9IjBweCIKCSB2aWV3Qm94PSIwIDAgNTEuMDI0IDUxLjAyNCIgZW5hYmxlLWJhY2tncm91bmQ9Im5ldyAwIDAgNTEuMDI0IDUxLjAyNCIgeG1sOnNwYWNlPSJwcmVzZXJ2ZSI+CjxnPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIzMi4zMjIsMTkuNzQ0IDIwLjY0OSwxOS43NDQgMTguNTkxLDMxLjQxNyAzMC4yNjQsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iNDcuMTg1LDE5Ljc0NCAzNS41MTIsMTkuNzQ0IDMzLjQ1NCwzMS40MTcgNDUuMTI2LDMxLjQxNyAJIi8+Cgk8cG9seWdvbiBmaWxsPSIjQTRCRkU0IiBwb2ludHM9IjI5Ljc2NiwzNC41NTEgMTguMDk0LDM0LjU1MSAxNi4wMzUsNDYuMjI0IDI3LjcwOCw0Ni4yMjQgCSIvPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIxNy41NywxOS43NDQgNS44OTcsMTkuNzQ0IDMuODM5LDMxLjQxNyAxNS41MTIsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iMzUuMTUsNC43OTkgMjMuNDc3LDQuNzk5IDIxLjQxOSwxNi40NzIgMzMuMDkyLDE2LjQ3MiAJIi8+Cjwvc3ZnPgo=
+type: application
+home: "https://git.nplus.cloud"
+maintainers:
+  - email: a.ahmann@4i.org
+    name: Andreas Ahmann
+    url: "https://www.nplus.cloud"
+dependencies:
+  - name: nplus-component-database
+    alias: database
+    condition: components.database
+    version: "*-0"
+    repository: "file://../database"
+  - name: nplus-component-nappl
+    alias: nappl
+    condition: components.nappl
+    version: "*-0"
+    repository: "file://../nappl"
+  - name: nplus-component-nstl
+    alias: nstl
+    condition: components.nstl
+    version: "*-0"
+    repository: "file://../nstl"
+  - name: nplus-component-nstl
+    alias: nstla
+    condition: components.nstla
+    version: "*-0"
+    repository: "file://../nstl"
+  - name: nplus-component-nstl
+    alias: nstlb
+    condition: components.nstlb
+    version: "*-0"
+    repository: "file://../nstl"
+  - name: nplus-component-nstl
+    alias: nstlc
+    condition: components.nstlc
+    version: "*-0"
+    repository: "file://../nstl"
+  - name: nplus-component-nstl
+    alias: nstld
+    condition: components.nstld
+    version: "*-0"
+    repository: "file://../nstl"
+  - name: nplus-component-nappl
+    alias: nappljobs
+    condition: components.nappljobs
+    version: "*-0"
+    repository: "file://../nappl"
+  - name: nplus-component-cmis
+    alias: cmis
+    condition: components.cmis
+    version: "*-0"
+    repository: "file://../cmis"
+  - name: nplus-component-ilm
+    alias: ilm
+    condition: components.ilm
+    version: "*-0"
+    repository: "file://../ilm"
+  - name: nplus-component-erpproxy
+    alias: erpproxy
+    condition: components.erpproxy
+    version: "*-0"
+    repository: "file://../erpproxy"
+  - name: nplus-component-erpcmis
+    alias: erpcmis
+    condition: components.erpcmis
+    version: "*-0"
+    repository: "file://../erpcmis"
+  - name: nplus-component-webdav
+    alias: webdav
+    condition: components.webdav
+    version: "*-0"
+    repository: "file://../webdav"
+  - name: nplus-component-sharepoint
+    alias: sharepoint
+    condition: components.sharepoint
+    version: "*-0"
+    repository: "file://../sharepoint"
+  - name: nplus-component-sharepoint
+    alias: sharepointa
+    condition: components.sharepointa
+    version: "*-0"
+    repository: "file://../sharepoint"
+  - name: nplus-component-sharepoint
+    alias: sharepointb
+    condition: components.sharepointb
+    version: "*-0"
+    repository: "file://../sharepoint"
+  - name: nplus-component-sharepoint
+    alias: sharepointc
+    condition: components.sharepointc
+    version: "*-0"
+    repository: "file://../sharepoint"
+  - name: nplus-component-sharepoint
+    alias: sharepointd
+    condition: components.sharepointd
+    version: "*-0"
+    repository: "file://../sharepoint"
+  - name: nplus-component-rs
+    alias: rs
+    condition: components.rs
+    version: "*-0"
+    repository: "file://../rs"
+  - name: nplus-component-web
+    alias: web
+    condition: components.web
+    version: "*-0"
+    repository: "file://../web"
+  - name: nplus-component-mon
+    alias: mon
+    condition: components.mon
+    version: "*-0"
+    repository: "file://../mon"
+  - name: nplus-component-administrator
+    alias: administrator
+    condition: components.administrator
+    version: "*-0"
+    repository: "file://../administrator"
+  - name: nplus-component-pipeliner
+    alias: pipeliner
+    condition: components.pipeliner
+    version: "*-0"
+    repository: "file://../pipeliner"
+  - name: nplus-component-rms
+    alias: rms
+    condition: components.rms
+    version: "*-0"
+    repository: "file://../rms"
+  - name: nplus-component-rms
+    alias: rmsa
+    condition: components.rmsa
+    version: "*-0"
+    repository: "file://../rms"
+  - name: nplus-component-rms
+    alias: rmsb
+    condition: components.rmsb
+    version: "*-0"
+    repository: "file://../rms"
+  - name: nplus-application
+    alias: application
+    condition: components.application
+    version: "*-0"
+    repository: "file://../application"
+  - name: nplus-prepper
+    alias: prepper
+    condition: components.prepper
+    version: "*-0"
+    repository: "file://../prepper"
+  - name: nplus-component-pam
+    alias: pam
+    condition: components.pam
+    version: "*-0"
+    repository: "file://../pam"
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+  - name: eon-dms-api
+    alias: dmsapi
+    condition: components.dmsapi
+    version: "*-0"
+    repository: "file://../dmsapi"
+  - name: nplus-environment-backend
+    condition: components.sim.backend
+    alias: backend
+    version: "*-0"
+    repository: "file://../envbackend"
+  - name: nplus-environment-dav
+    condition: components.sim.dav
+    alias: dav
+    version: "*-0"
+    repository: "file://../envdav"
+  - name: nplus-environment-toolbox
+    alias: toolbox
+    condition: components.sim.toolbox
+    version: "*-0"
+    repository: "file://../envtoolbox"
+  - name: nplus-environment-operator
+    condition: components.sim.operator
+    alias: operator
+    version: "*-0"
+    repository: "file://../envoperator"
+version: 1.0.0
diff --git a/charts/instance/README.md b/charts/instance/README.md
new file mode 100644
index 0000000..03dbc24
--- /dev/null
+++ b/charts/instance/README.md
@@ -0,0 +1,359 @@
+
+
+# nplus-instance
+
+nplus Instance, an umbrella chart for orchestrating the components in a nplus Instance
+
+# Single Instance Mode
+
+If you want to separate tenants on your system not only by instance but also by environment / namespace, you can run *nplus* in *single instance mode*.
+
+SIM (Single Instance Mode) lets you deploy your instance including all components of the environment in one single chart.
+
+Steps to turn on single instance mode:
+
+- Create your Namespace
+- Upload the secrets you need to access the repos, registries as well as the nscale license file
+- Turn on the sim components in your instance values file
+- deploy your instance (under the same name as your namespace) to the new namespace
+
+In this case, no separate deployment of the environment is necessary and the environment components will show up as parts of the instance.
+
+Please also see the example *Single-Instance-Mode* for a detailed How-To.
+
+## nplus-instance Chart Configuration
+
+You can customize / configure nplus-instance by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+**administrator**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"administrator"` |
+**administrator**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**administrator**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1201"` |
+**administrator**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1201"` |
+**administrator**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `9` |
+**administrator**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**application**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"application-layer"` |
+**application**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**application**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1300.2024121814"` |
+**application**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1300"` |
+**application**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `11` |
+**application**&#8203;.nstl&#8203;.host | sets the dns of the *nscale Server Storage Layer*, that should be configured |  `"{{ .component.prefix }}nstl.{{ .Release.Namespace }}"` |
+**application**&#8203;.rs&#8203;.host | sets the dns of the *nscale Rendition Server*, that should be configured |  `"{{ .component.prefix }}rs.{{ .Release.Namespace }}"` |
+**application**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**backend**&#8203;.meta&#8203;.componentVersion |  |  `"1.2.1400-124"` |
+**backend**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `1` |
+**cmis**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"cmis-connector"` |
+**cmis**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**cmis**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1200.2024112508"` |
+**cmis**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1200"` |
+**cmis**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `8` |
+**cmis**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**components**&#8203;.administrator | enable a *nscale Administrator Web* component in this instance |  `false` |
+**components**&#8203;.application | deploy any solution using GBA, Standard Apps or shell copy with this generic deployment chart |  `false` |
+**components**&#8203;.cmis | enable a *nscale CMIS Connector* component in this instance |  `false` |
+**components**&#8203;.database | enable an internal *Postgres Database* in this instance |  `true` |
+**components**&#8203;.dmsapi |  |  `false` |
+**components**&#8203;.erpcmis | enable a *nscale ERP CMIS Connector* component in this instance |  `false` |
+**components**&#8203;.erpproxy | enable a *nscale ERP Proxy Connector* component in this instance |  `false` |
+**components**&#8203;.ilm | enable a *nscale ILM Connector* component in this instance |  `false` |
+**components**&#8203;.mon | enable a *nscale Monitoring Console* component in this instance |  `false` |
+**components**&#8203;.nappl | enable a consumer *nscale Application Layer* component in this instance |  `true` |
+**components**&#8203;.nappljobs | enable a dedicated jobs *nscale Application Layer* component in this instance please also make sure to set the *jobs* setting |  `false` |
+**components**&#8203;.nstl | enable a *nscale Server Storage Layer* component in this instance If you are in a **High Availability** scenario, disable this |  `true` |
+**components**&#8203;.nstla | enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario. |  `false` |
+**components**&#8203;.nstlb | enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario. |  `false` |
+**components**&#8203;.nstlc | enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario. |  `false` |
+**components**&#8203;.nstld | enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario. |  `false` |
+**components**&#8203;.pam | enable a *nscale Process Automation Modeler* component in this instance |  `false` |
+**components**&#8203;.pipeliner | enable *nscale Pipeliner* component in this instance |  `false` |
+**components**&#8203;.prepper | download, deploy and run any git asset or script prior to installation of the components |  `false` |
+**components**&#8203;.rms | enable a *nplus Remote Management Server* component in this instance If you are in a **High Availability** scenario, disable this |  `false` |
+**components**&#8203;.rmsa | enable an additional *nplus Remote Management Server* in this instance within a **High Availability** scenario. |  `false` |
+**components**&#8203;.rmsb | enable an additional *nplus Remote Management Server* in this instance within a **High Availability** scenario. |  `false` |
+**components**&#8203;.rs | enable a *nscale Rendition Server* component in this instance |  `true` |
+**components**&#8203;.sharepoint | enable a *nscale Sharepoint Connector* component in this instance |  `false` |
+**components**&#8203;.sharepointa | enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters |  `false` |
+**components**&#8203;.sharepointb | enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters |  `false` |
+**components**&#8203;.sharepointc | enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters |  `false` |
+**components**&#8203;.sharepointd | enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters |  `false` |
+**components**&#8203;.sim&#8203;.backend | This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. the backend components holds the common storages / PVCs for conf and ptemp umong other common environmental resources |  `false` |
+**components**&#8203;.sim&#8203;.dav | This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. DAV gives you WebDAV access to your conf and ptemp volumes |  `false` |
+**components**&#8203;.sim&#8203;.operator | This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. The Operator will let you query the Custom Resources for nscale, e.g. `kubectl get nscale` |  `false` |
+**components**&#8203;.sim&#8203;.toolbox | This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. the toolbox has a git client installed and is suitable for pulling, pushing, copying  stuff into the pool, fonts, certificates, snippets and configuration files |  `false` |
+**components**&#8203;.web | enable a *nscale Web* component in this instance |  `true` |
+**components**&#8203;.webdav | enable a *nscale WebDAV Connector* component in this instance |  `false` |
+**database**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"bitnami/postgresql"` |
+**database**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |   |
+**database**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"16"` |
+**database**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"16"` |
+**database**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `3` |
+**dmsapi**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `8` |
+**dmsapi**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**erpcmis**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"erp-cmis-connector"` |
+**erpcmis**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**erpcmis**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.2.1000.2024032720"` |
+**erpcmis**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.2.1000"` |
+**erpcmis**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `8` |
+**erpcmis**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**erpproxy**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"sap-proxy-connector"` |
+**erpproxy**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/pre-release/nscale"` |
+**erpproxy**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1000.2024092409"` |
+**erpproxy**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1000"` |
+**erpproxy**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `8` |
+**erpproxy**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**global**&#8203;.database&#8203;.account | DB account (if not using a secret) |  `"nscale"` |
+**global**&#8203;.database&#8203;.dialect | nscale DB server dialect |  `"PostgreSQL"` |
+**global**&#8203;.database&#8203;.driverclass | nscale DB server driverclass |  `"org.postgresql.Driver"` |
+**global**&#8203;.database&#8203;.name | name of the nscale DB |  `"nscale"` |
+**global**&#8203;.database&#8203;.password | DB password (if not using a secret) |  `"nscale"` |
+**global**&#8203;.database&#8203;.passwordEncoded | weather the password is stored encrypted |  `"false"` |
+**global**&#8203;.database&#8203;.schema | DB schema name |  `"public"` |
+**global**&#8203;.database&#8203;.secret | DB credential secret (account, password) |   |
+**global**&#8203;.database&#8203;.url | The URL to the database |  `"jdbc:postgresql://{{ .component.prefix }}database:5432/{{ .this.database.name }}"` |
+**global**&#8203;.ingress&#8203;.appRoot | Sets the root for this instance, where incoming root traffic should be redirected to |  `"/nscale_web"` |
+**global**&#8203;.ingress&#8203;.class | sets the global ingressclass for all components to use - if they do not define a specific one, for example if there are separate controllers for internal and external traffic |  `public`` |
+**global**&#8203;.ingress&#8203;.createSelfSignedCertificate | if you do not define an issuer to generate the tls secret for you, you still can have a self signed certificate generated for you, if you set this to true. The default is true, so either you have an issuer or not, you will always end up with a certificate. Set an empty issuer and createSelfSignedCertificate to false to have no certificate generated and use an external or existing secret. Then make sure the secret matches. |  `true` |
+**global**&#8203;.ingress&#8203;.domain | Sets the global domain within the instance to be used, if the component does not define any domain. If this remains empty, no ingress is generated Example: `{{ .instance.group }}.lab.nplus.cloud` |   |
+**global**&#8203;.ingress&#8203;.issuer | Sets the name of the issuer to create the tls secret. Very common is to have it created by  cert-manager. Please see the documentation how to create a cert-manager cluster issuer for example. If no issuer is set, no certificate request will be generated |   |
+**global**&#8203;.ingress&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  `ingress,  kube-system,  ingress-nginx` |
+**global**&#8203;.ingress&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. This secret is then either generated by cert-manager or self signed by helm - or not created |  `{{ .this.ingress.domain }}-tls` |
+**global**&#8203;.ingress&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**global**&#8203;.instance&#8203;.group | The group of the instance. This is used for the networkPolicies. Only Pods within one group are allowed to communicate if you enable the nplus Network Policies. By default, this is set the same as the instance name |   |
+**global**&#8203;.instance&#8203;.name | The name of the instance. Should this name be identical to the namespace name, then  the prefix will be dropped. By default, this is the .Release.Name |  `"{{ .Release.Name }}"` |
+**global**&#8203;.license | Globally set the license secret name |  `"nscale-license"` |
+**global**&#8203;.logForwarderImage&#8203;.name | defines the nplus toolbox name to be used for the *wait* feature |  `"fluent-bit"` |
+**global**&#8203;.logForwarderImage&#8203;.pullPolicy | defines the nplus toolbox pull policy to be used for the *wait* feature |  `"IfNotPresent"` |
+**global**&#8203;.logForwarderImage&#8203;.repo | defines the nplus toolbox image to be used for the *wait* feature |  `"cr.fluentbit.io/fluent"` |
+**global**&#8203;.logForwarderImage&#8203;.tag | defines the tag for the logforwarder (FluentBit) <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"2.0"` |
+**global**&#8203;.meta&#8203;.nscaleVersion | Sets the nscale version of this deployment / instance. This is used by the operator to display the correct version e.g. in the Web UI. <br>this is set by the devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1300"` |
+**global**&#8203;.nappl&#8203;.account | The technical account to login with |  `"admin"` |
+**global**&#8203;.nappl&#8203;.domain | The domain of the technical account |  `"nscale"` |
+**global**&#8203;.nappl&#8203;.host | sets the *nscale Server Application Layer* host to be used. As this is a global option, it can be overridden at component level. |  `"{{ .component.prefix }}nappl.{{ .Release.Namespace }}"` |
+**global**&#8203;.nappl&#8203;.instance | the instance of *nscale Server Application Layer* to be used <br>As this is depricated for nscale 10, you should never modify this. | **info only**, do not change<br> `"nscalealinst1"` |
+**global**&#8203;.nappl&#8203;.password | The password of the technical accunt (if not set by secret) |  `"admin"` |
+**global**&#8203;.nappl&#8203;.port | sets the *nscale Server Application Layer* port to be used. As this is a global option, it can be overridden at component level. if you switch to zero trus mode or change the nappl backend to https, you want to modify this port to 8443 |  `8080` |
+**global**&#8203;.nappl&#8203;.secret | An optional secret that holds the credentials (the keys must be `account` and `password`) |   |
+**global**&#8203;.nappl&#8203;.ssl | wether to use ssl or not for the advanced connector |  `false` |
+**global**&#8203;.security&#8203;.cni&#8203;.administratorInstance | sets the instance, from which Administration is allowed |  `"{{ .this.instance.name }}"` |
+**global**&#8203;.security&#8203;.cni&#8203;.administratorNamespace | sets the namespace, from which Administration is allowed |  `"{{ .Release.Namespace }}"` |
+**global**&#8203;.security&#8203;.cni&#8203;.createNetworkPolicy | creates NetworkPolicies for each  component. |   |
+**global**&#8203;.security&#8203;.cni&#8203;.defaultEgressPolicy | if defined, creates a default NetworkPolicy to handle  egress Traffic from the instance. Possible Values: deny, allow, none |   |
+**global**&#8203;.security&#8203;.cni&#8203;.defaultIngressPolicy | if defined, creates a default NetworkPolicy to handle  ingress Traffic to the instance. Possible Values: deny, allow, none |   |
+**global**&#8203;.security&#8203;.cni&#8203;.monitoringInstance | sets the instance, from which Monitoring is allowed |  `"{{ .this.instance.name }}"` |
+**global**&#8203;.security&#8203;.cni&#8203;.monitoringNamespace | sets the namespace, from which Monitoring is allowed |  `"{{ .Release.Namespace }}"` |
+**global**&#8203;.security&#8203;.cni&#8203;.pamInstance | sets the instance, from which Process Automation Modeling is allowed |  `"{{ .this.instance.name }}"` |
+**global**&#8203;.security&#8203;.cni&#8203;.pamNamespace | sets the namespace, from which Process Automation Modeling is allowed |  `"{{ .Release.Namespace }}"` |
+**global**&#8203;.security&#8203;.zeroTrust | enables zero trust on the instance. When enabled, no unencrypted http connection is allowed. This will remove all http ports from pods, services, network policies and ingress rules |   |
+**global**&#8203;.telemetry&#8203;.openTelemetry | if you use a OpenTelemetry as a telemetry collector, you can enable it here. This will add the annotations to some known pods for the injector to use agents inside the pods for telemetry collection.  This often goes along with the `language` setting in the meta section to tell the  telemetry collector which agent to inject. |   |
+**global**&#8203;.waitImage&#8203;.name | defines the nplus toolbox name to be used for the *wait* feature |  `"toolbox2"` |
+**global**&#8203;.waitImage&#8203;.pullPolicy | defines the nplus toolbox pull policy to be used for the *wait* feature |  `"IfNotPresent"` |
+**global**&#8203;.waitImage&#8203;.repo | defines the nplus toolbox image to be used for the *wait* feature |  `"cr.nplus.cloud/subscription"` |
+**global**&#8203;.waitImage&#8203;.tag | defines the nplus toolbox tag to be used for the *wait* feature <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"1.2.1300"` |
+**ilm**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ilm-connector"` |
+**ilm**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**ilm**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1000.2024091702"` |
+**ilm**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1000"` |
+**ilm**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `8` |
+**ilm**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**mon**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"monitoring-console"` |
+**mon**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**mon**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1000.2024092618"` |
+**mon**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1000"` |
+**mon**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `8` |
+**nappl**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"application-layer"` |
+**nappl**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**nappl**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1300.2024121814"` |
+**nappl**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1300"` |
+**nappl**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `"{{ if .this.jobs }}4{{ else }}6{{ end }}"` |
+**nappl**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}database.{{ .Release.Namespace }}.svc.cluster.local:5432 -timeout 600"]` |
+**nappljobs**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"application-layer"` |
+**nappljobs**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**nappljobs**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1300.2024121814"` |
+**nappljobs**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1300"` |
+**nappljobs**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `4` |
+**nstl**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"storage-layer"` |
+**nstl**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**nstl**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1201.2024112518"` |
+**nstl**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1201"` |
+**nstl**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `3` |
+**nstla**&#8203;.clusterService&#8203;.enabled | When using multiple nstl Instances with different configurations, you still might want to use a cluster service for HA access This will generate one for you. |  `true` |
+**nstla**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"storage-layer"` |
+**nstla**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**nstla**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1201.2024112518"` |
+**nstla**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1201"` |
+**nstla**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `3` |
+**nstlb**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"storage-layer"` |
+**nstlb**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**nstlb**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1201.2024112518"` |
+**nstlb**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1201"` |
+**nstlb**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `3` |
+**nstlc**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"storage-layer"` |
+**nstlc**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**nstlc**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1201.2024112518"` |
+**nstlc**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1201"` |
+**nstlc**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `3` |
+**nstld**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"storage-layer"` |
+**nstld**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**nstld**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1201.2024112518"` |
+**nstld**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1201"` |
+**nstld**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `3` |
+**pam**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"process-automation-modeler"` |
+**pam**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**pam**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1200.63696"` |
+**pam**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1200"` |
+**pam**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `9` |
+**pam**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**pipeliner**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"pipeliner"` |
+**pipeliner**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**pipeliner**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1300.2024121815"` |
+**pipeliner**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1300"` |
+**pipeliner**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `8` |
+**pipeliner**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**prepper**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"toolbox2"` |
+**prepper**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"cr.nplus.cloud/subscription"` |
+**prepper**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"1.2.1300"` |
+**prepper**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"1.2.1300"` |
+**prepper**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `2` |
+**rms**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"admin-server"` |
+**rms**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"cr.nplus.cloud/subscription"` |
+**rms**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"1.2.1200"` |
+**rms**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"1.2.1200"` |
+**rms**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `10` |
+**rmsa**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"admin-server"` |
+**rmsa**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"cr.nplus.cloud/subscription"` |
+**rmsa**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"1.2.1200"` |
+**rmsa**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"1.2.1200"` |
+**rmsa**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `10` |
+**rmsb**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"admin-server"` |
+**rmsb**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"cr.nplus.cloud/subscription"` |
+**rmsb**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"1.2.1200"` |
+**rmsb**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"1.2.1200"` |
+**rmsb**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `10` |
+**rs**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"rendition-server"` |
+**rs**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**rs**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1301.2024121910"` |
+**rs**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1301"` |
+**rs**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `4` |
+**sharepoint**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"sharepoint-connector"` |
+**sharepoint**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**sharepoint**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.2.1400.2024073012"` |
+**sharepoint**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.2.1400"` |
+**sharepoint**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `8` |
+**sharepoint**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**sharepointa**&#8203;.clusterService&#8203;.contextPath | Set the context Path for the cluster Ingress. Make sure also the members are listening to this path |  `"/nscale_spc"` |
+**sharepointa**&#8203;.clusterService&#8203;.enabled | When using multiple SharePoint Connectors with different configurations, you still might want to use a retrieval cluster for HA so you can enable the clusterService and define the context path. |  `false` |
+**sharepointa**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"sharepoint-connector"` |
+**sharepointa**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**sharepointa**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.2.1400.2024073012"` |
+**sharepointa**&#8203;.ingress&#8203;.contextPath | Defines the context path of this sharepoint instance, in case you might have multiple instances. We do not want them to consume the same ingress path, because it would block the ingress from being created. |  `"/nscale_spca"` |
+**sharepointa**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.2.1400"` |
+**sharepointa**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `8` |
+**sharepointa**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**sharepointb**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"sharepoint-connector"` |
+**sharepointb**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**sharepointb**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.2.1400.2024073012"` |
+**sharepointb**&#8203;.ingress&#8203;.contextPath | Defines the context path of this sharepoint instance, in case you might have multiple instances. We do not want them to consume the same ingress path, because it would block the ingress from being created. |  `"/nscale_spcb"` |
+**sharepointb**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.2.1400"` |
+**sharepointb**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `8` |
+**sharepointb**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**sharepointc**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"sharepoint-connector"` |
+**sharepointc**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**sharepointc**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.2.1400.2024073012"` |
+**sharepointc**&#8203;.ingress&#8203;.contextPath | Defines the context path of this sharepoint instance, in case you might have multiple instances. We do not want them to consume the same ingress path, because it would block the ingress from being created. |  `"/nscale_spcc"` |
+**sharepointc**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.2.1400"` |
+**sharepointc**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `8` |
+**sharepointc**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**sharepointd**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"sharepoint-connector"` |
+**sharepointd**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**sharepointd**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.2.1400.2024073012"` |
+**sharepointd**&#8203;.ingress&#8203;.contextPath | Defines the context path of this sharepoint instance, in case you might have multiple instances. We do not want them to consume the same ingress path, because it would block the ingress from being created. |  `"/nscale_spcd"` |
+**sharepointd**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.2.1400"` |
+**sharepointd**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `8` |
+**sharepointd**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+**web**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"application-layer-web"` |
+**web**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**web**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1300.2024121620"` |
+**web**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1300"` |
+**web**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `7` |
+**web**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 900"]` |
+**webdav**&#8203;.image&#8203;.name | sets the name of the image to use for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"webdav-connector"` |
+**webdav**&#8203;.image&#8203;.repo | sets the repo from where to load the image. This can be overridden on environment or instance level in case you have your own repo for caching and security reasons |  `"ceyoniq.azurecr.io/release/nscale"` |
+**webdav**&#8203;.image&#8203;.tag | defines the tag for this component <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"ubi.9.3.1000.2024091609"` |
+**webdav**&#8203;.meta&#8203;.componentVersion | This is the version of the component, used for display <br>set by devOps pipeline, so do not modify | **info only**, do not change<br> `"9.3.1000"` |
+**webdav**&#8203;.meta&#8203;.wave | Defines the ArgoCD wave in which this component should be installed.  This setting only applies to scenarios, where ArgoCD is used as handler |  `8` |
+**webdav**&#8203;.waitFor | Defines what condition needs to be met before this components starts |  `["-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"]` |
+
diff --git a/charts/instance/templates/NOTES.txt b/charts/instance/templates/NOTES.txt
new file mode 100644
index 0000000..1e329e0
--- /dev/null
+++ b/charts/instance/templates/NOTES.txt
@@ -0,0 +1,11 @@
+CHART NAME: {{ .component.chart }}
+CHART VERSION: {{ .Chart.Version }}
+{{- if .Chart.AppVersion }}
+APP VERSION: {{ .Chart.AppVersion }}
+{{- end }}
+
+** Please be patient while the chart is being deployed **
+
+uninstall {{ .Release.Name }} using
+
+        helm uninstall {{ include "nplus.cli" . }}
diff --git a/charts/instance/templates/certificate.tpl b/charts/instance/templates/certificate.tpl
new file mode 100644
index 0000000..5d85b44
--- /dev/null
+++ b/charts/instance/templates/certificate.tpl
@@ -0,0 +1 @@
+{{- include "nplus.certificate" . | nindent 0 }}
diff --git a/charts/instance/templates/instance.tpl b/charts/instance/templates/instance.tpl
new file mode 100644
index 0000000..7e8e22a
--- /dev/null
+++ b/charts/instance/templates/instance.tpl
@@ -0,0 +1,54 @@
+{{- include "nplus.init" $ -}}
+
+{{/*
+Assemble List of Components
+*/}}
+{{- define "nplus.instance.getComponents" -}}
+{{- $mylist := list -}}
+{{- range $key, $value := .Values.components }}
+  {{- if $value }}
+    {{- $replicas := (( index $.Values $key ).replicaCount | default 1) | int }}
+    {{- if (gt $replicas 1) }}
+      {{- $mylist = append $mylist (printf "%s(%d)" ($key) $replicas) }}
+    {{- else }}
+      {{- $mylist = append $mylist (printf "%s" ($key)) }}
+    {{- end }}
+  {{- end }}
+{{- end }}
+{{- join "," $mylist -}}
+{{- end -}}
+
+{{/*
+Assemble List of Expectations
+*/}}
+{{- define "nplus.instance.getExpected" -}}
+{{- range $key, $value := .Values.components }}
+  {{- if $value }}
+    {{- $replicas := (( index $.Values $key ).replicaCount | default 1) | int }}
+- component: {{ $key }}
+  replicaCount: {{ $replicas }}
+  {{- end }}
+{{- end }}
+{{- end -}}
+
+apiVersion: nplus.cloud/v1beta1
+kind: Instance
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .Release.Name }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.annotations" . | nindent 4 }}
+    argocd.argoproj.io/sync-wave: "1"
+spec:
+  nscaleVersion: {{ .instance.version | quote }}
+  components: {{ include "nplus.instance.getComponents" . }}
+  handler: {{ .component.handler }}
+  expected:
+  {{- include "nplus.instance.getExpected" . | indent 2 }}
+  tenant: {{ (.this.meta).tenant }}
+  provider: {{ (.this.meta).provider }}
+  url: {{ include "nplus.url" . | quote }}
diff --git a/charts/instance/templates/nappl-cluster-service.tpl b/charts/instance/templates/nappl-cluster-service.tpl
new file mode 100644
index 0000000..c22f9da
--- /dev/null
+++ b/charts/instance/templates/nappl-cluster-service.tpl
@@ -0,0 +1,39 @@
+{{- include "nplus.init" $ -}}
+{{- if or (.Values.components).nappl (.Values.components).nappljobs -}}
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ .component.prefix }}nappl-cluster
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service.
+  # It is purely used to collect the EndPointSlices
+  type: ClusterIP
+  clusterIP: None
+
+  ports:
+  {{- if not (.this.security).zeroTrust }}
+  - name: http
+    port: 8080
+    targetPort: http
+    protocol: TCP
+  {{- end }}
+  - name: https
+    port: 8443
+    targetPort: https
+    protocol: TCP
+
+  selector:
+    nplus/group: {{ .instance.group }}
+    nplus/type: core
+{{- end -}}
\ No newline at end of file
diff --git a/charts/instance/templates/networkpolicy.tpl b/charts/instance/templates/networkpolicy.tpl
new file mode 100644
index 0000000..9eed1ef
--- /dev/null
+++ b/charts/instance/templates/networkpolicy.tpl
@@ -0,0 +1,115 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+
+{{- if ((.this.security).cni).defaultIngressPolicy }}
+{{- if eq ((.this.security).cni).defaultIngressPolicy "deny" }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ .component.prefix }}default-deny-ingress
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+      nplus/group: {{ .instance.group }}
+  policyTypes:
+  - Ingress
+{{- end }}
+---
+{{- if eq ((.this.security).cni).defaultIngressPolicy "allow" }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ .component.prefix }}default-allow-ingress
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+      nplus/group: {{ .instance.group }}
+  policyTypes:
+  - Ingress
+  ingress:
+  - {}
+{{- end }}
+
+{{- end }}
+---
+{{- if ((.this.security).cni).defaultEgressPolicy }}
+{{- if eq ((.this.security).cni).defaultEgressPolicy "deny" }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ .component.prefix }}default-deny-egress
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+      nplus/group: {{ .instance.group }}
+  policyTypes:
+  - Egress
+{{- end }}
+---
+{{- if eq ((.this.security).cni).defaultEgressPolicy "allow" }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ .component.prefix }}default-allow-egress
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+      nplus/group: {{ .instance.group }}
+  policyTypes:
+  - Egress
+  ingress:
+  - {}
+{{- end }}
+
+{{- end }}
+
+
+
+
+---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.prefix }}allow-dns
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+spec:
+  podSelector:
+    matchLabels:
+      nplus/group: {{ .instance.group }}
+  policyTypes:
+    - Egress
+  egress:
+  - to:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: kube-system
+    ports:
+      - protocol: UDP
+        port: 53
+      - protocol: TCP
+        port: 53
+
+
+{{- end }}
\ No newline at end of file
diff --git a/charts/instance/templates/sanity.tpl b/charts/instance/templates/sanity.tpl
new file mode 100644
index 0000000..0d963d2
--- /dev/null
+++ b/charts/instance/templates/sanity.tpl
@@ -0,0 +1,7 @@
+{{- if (and (.Values.components).nstl ( or (.Values.components).nstla (.Values.components).nstlb (.Values.components).nstlc (.Values.components).nstld)) -}}
+{{- fail "You can only choose nstl or nstl[a-d], not both" -}}
+{{- end -}}
+
+{{- if (and (.Values.components).sharepoint ( or (.Values.components).sharepointa (.Values.components).sharepointb (.Values.components).sharepointc (.Values.components).sharepointd)) -}}
+{{- fail "You can only choose sharepoint or sharepoint[a-d], not both" -}}
+{{- end -}}
diff --git a/charts/instance/values.schema.json b/charts/instance/values.schema.json
new file mode 100644
index 0000000..58e5e53
--- /dev/null
+++ b/charts/instance/values.schema.json
@@ -0,0 +1,29266 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "administrator": {
+      "description": "nscale Administrator, providing the Web Version of the Administrator to be used in the Instance",
+      "properties": {
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "administrator",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1201",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/rapadm",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "-Dorg.eclipse.rap.rwt.settingStoreFactory=settings-per-user",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8080",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8443",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "administrator",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "administrator",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "/tmp",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "There should only be a single Administrator instance, so the replicaCount is fixed to 1 @ignore -- Do not change this.",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-administrator",
+      "type": "object"
+    },
+    "application": {
+      "description": "nplus Application, used to install Apps and Customizations into the nscale Application Layer.",
+      "properties": {
+        "docAreas": {
+          "default": "",
+          "description": "Provide a list of docareas to create. Please also see the example files",
+          "title": "docAreas"
+        },
+        "download": {
+          "default": "",
+          "description": "A list of URLs (Links) to Assets to download before anything else if the download is a .tar.gz, it is automatically untared to /pool/downloads",
+          "title": "download"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "application-layer",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1300.2024121814",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "yaml-language-server: $schema=values.schema.json",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "application",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/application",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "/pool",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "/tmp",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "nstl": {
+          "additionalProperties": false,
+          "properties": {
+            "host": {
+              "default": "",
+              "description": "The dns of the *nscale Server Storage Layer*. This is used to add it to the nappl configuration",
+              "title": "host"
+            }
+          },
+          "title": "nstl",
+          "type": "object"
+        },
+        "prerun": {
+          "default": "",
+          "description": "A list of scripts to run before the deployment of Apps",
+          "title": "prerun"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "rs": {
+          "additionalProperties": false,
+          "properties": {
+            "host": {
+              "default": "",
+              "description": "The dns of the *nscale rendition Server*. This is used to add it to the nappl configuration",
+              "title": "host"
+            }
+          },
+          "title": "rs",
+          "type": "object"
+        },
+        "run": {
+          "default": "",
+          "description": "A list of scripts to run after the deployment of Apps",
+          "title": "run"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-application",
+      "type": "object"
+    },
+    "backend": {
+      "description": "Installs Namespace-Wide Resources such as the conf PVC and the ptemp PVC",
+      "properties": {
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "storage": {
+          "additionalProperties": false,
+          "description": "yaml-language-server: $schema=values.schema.json",
+          "properties": {
+            "conf": {
+              "additionalProperties": false,
+              "properties": {
+                "name": {
+                  "default": "",
+                  "description": "this is the name of the common config storage. please see section \"Storage\" for more information",
+                  "title": "name"
+                },
+                "size": {
+                  "default": "",
+                  "description": "this is the size of the common config storage. please see section \"Storage\" for more information",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner",
+                  "title": "volumeName"
+                }
+              },
+              "title": "conf",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "properties": {
+                "name": {
+                  "default": "",
+                  "description": "this is the name of the common persistant temp storage. please see section \"Storage\" for more information",
+                  "title": "name"
+                },
+                "size": {
+                  "default": "",
+                  "description": "this is the size of the common ptemp storage. please see section \"Storage\" for more information",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner",
+                  "title": "volumeName"
+                }
+              },
+              "title": "ptemp",
+              "type": "object"
+            }
+          },
+          "title": "storage",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-environment-backend",
+      "type": "object"
+    },
+    "cmis": {
+      "description": "nscale CMIS Connector, provides a CMIS Interface to the Instance",
+      "properties": {
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "cmis-connector",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1200.2024112508",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/cmis",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8096",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8196",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "cmis-connector",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "cmis",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCount": {
+          "default": "",
+          "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+          "title": "minReplicaCount"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-cmis-connector/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-cmis-connector/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-cmis-connector/temp",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "updateStrategy": {
+          "default": "",
+          "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+          "title": "updateStrategy"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-cmis",
+      "type": "object"
+    },
+    "components": {
+      "additionalProperties": false,
+      "properties": {
+        "administrator": {
+          "default": "false",
+          "description": "enable a *nscale Administrator Web* component in this instance",
+          "title": "administrator"
+        },
+        "application": {
+          "default": "false",
+          "description": "deploy any solution using GBA, Standard Apps or shell copy with this generic deployment chart",
+          "title": "application"
+        },
+        "cmis": {
+          "default": "false",
+          "description": "enable a *nscale CMIS Connector* component in this instance",
+          "title": "cmis"
+        },
+        "database": {
+          "default": "true",
+          "description": "enable an internal *Postgres Database* in this instance",
+          "title": "database"
+        },
+        "dmsapi": {
+          "default": false,
+          "description": "TODO: remove",
+          "title": "dmsapi",
+          "type": "boolean"
+        },
+        "erpcmis": {
+          "default": "false",
+          "description": "enable a *nscale ERP CMIS Connector* component in this instance",
+          "title": "erpcmis"
+        },
+        "erpproxy": {
+          "default": "false",
+          "description": "enable a *nscale ERP Proxy Connector* component in this instance",
+          "title": "erpproxy"
+        },
+        "ilm": {
+          "default": "false",
+          "description": "enable a *nscale ILM Connector* component in this instance",
+          "title": "ilm"
+        },
+        "mon": {
+          "default": "false",
+          "description": "enable a *nscale Monitoring Console* component in this instance",
+          "title": "mon"
+        },
+        "nappl": {
+          "default": "true",
+          "description": "enable a consumer *nscale Application Layer* component in this instance",
+          "title": "nappl"
+        },
+        "nappljobs": {
+          "default": "false",
+          "description": "enable a dedicated jobs *nscale Application Layer* component in this instance please also make sure to set the *jobs* setting",
+          "title": "nappljobs"
+        },
+        "nstl": {
+          "default": "true",
+          "description": "enable a *nscale Server Storage Layer* component in this instance If you are in a **High Availability** scenario, disable this",
+          "title": "nstl"
+        },
+        "nstla": {
+          "default": "false",
+          "description": "enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario.",
+          "title": "nstla"
+        },
+        "nstlb": {
+          "default": "false",
+          "description": "enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario.",
+          "title": "nstlb"
+        },
+        "nstlc": {
+          "default": "false",
+          "description": "enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario.",
+          "title": "nstlc"
+        },
+        "nstld": {
+          "default": "false",
+          "description": "enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario.",
+          "title": "nstld"
+        },
+        "pam": {
+          "default": "false",
+          "description": "enable a *nscale Process Automation Modeler* component in this instance",
+          "title": "pam"
+        },
+        "pipeliner": {
+          "default": "false",
+          "description": "enable *nscale Pipeliner* component in this instance",
+          "title": "pipeliner"
+        },
+        "prepper": {
+          "default": "false",
+          "description": "download, deploy and run any git asset or script prior to installation of the components",
+          "title": "prepper"
+        },
+        "rms": {
+          "default": "false",
+          "description": "enable a *nplus Remote Management Server* component in this instance If you are in a **High Availability** scenario, disable this",
+          "title": "rms"
+        },
+        "rmsa": {
+          "default": "false",
+          "description": "enable an additional *nplus Remote Management Server* in this instance within a **High Availability** scenario.",
+          "title": "rmsa"
+        },
+        "rmsb": {
+          "default": "false",
+          "description": "enable an additional *nplus Remote Management Server* in this instance within a **High Availability** scenario.",
+          "title": "rmsb"
+        },
+        "rs": {
+          "default": "true",
+          "description": "enable a *nscale Rendition Server* component in this instance",
+          "title": "rs"
+        },
+        "sharepoint": {
+          "default": "false",
+          "description": "enable a *nscale Sharepoint Connector* component in this instance",
+          "title": "sharepoint"
+        },
+        "sharepointa": {
+          "default": "false",
+          "description": "enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters",
+          "title": "sharepointa"
+        },
+        "sharepointb": {
+          "default": "false",
+          "description": "enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters",
+          "title": "sharepointb"
+        },
+        "sharepointc": {
+          "default": "false",
+          "description": "enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters",
+          "title": "sharepointc"
+        },
+        "sharepointd": {
+          "default": "false",
+          "description": "enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters",
+          "title": "sharepointd"
+        },
+        "sim": {
+          "additionalProperties": false,
+          "description": "This section is for the single-instance-mode in which all environement components are integrated into the instance",
+          "properties": {
+            "backend": {
+              "default": "false",
+              "description": "This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. the backend components holds the common storages / PVCs for conf and ptemp umong other common environmental resources",
+              "title": "backend"
+            },
+            "dav": {
+              "default": "false",
+              "description": "This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. DAV gives you WebDAV access to your conf and ptemp volumes",
+              "title": "dav"
+            },
+            "operator": {
+              "default": "false",
+              "description": "This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. The Operator will let you query the Custom Resources for nscale, e.g. `kubectl get nscale`",
+              "title": "operator"
+            },
+            "toolbox": {
+              "default": "false",
+              "description": "This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. the toolbox has a git client installed and is suitable for pulling, pushing, copying  stuff into the pool, fonts, certificates, snippets and configuration files",
+              "title": "toolbox"
+            }
+          },
+          "title": "sim"
+        },
+        "web": {
+          "default": "true",
+          "description": "enable a *nscale Web* component in this instance",
+          "title": "web"
+        },
+        "webdav": {
+          "default": "false",
+          "description": "enable a *nscale WebDAV Connector* component in this instance",
+          "title": "webdav"
+        }
+      },
+      "title": "components",
+      "type": "object"
+    },
+    "database": {
+      "description": "Postgres Database, deploys a DEV or TESTING environment DB",
+      "properties": {
+        "database": {
+          "additionalProperties": false,
+          "properties": {
+            "account": {
+              "default": "nscale",
+              "description": "the technical account to own the nscale database, if not set by secret",
+              "title": "account"
+            },
+            "name": {
+              "default": "nscale",
+              "description": "name of the nscale database",
+              "title": "name"
+            },
+            "password": {
+              "default": "nscale",
+              "description": "password of the technical account, if not set by secret",
+              "title": "password"
+            },
+            "secret": {
+              "default": "",
+              "description": "the secret with credentials (account, password) for the nscale technical account. This setting has priority over account and password",
+              "title": "secret"
+            }
+          },
+          "title": "database",
+          "type": "object"
+        },
+        "dbAdmin": {
+          "additionalProperties": false,
+          "properties": {
+            "account": {
+              "default": "postgres",
+              "description": "the database admin account, if not set by secret",
+              "title": "account"
+            },
+            "password": {
+              "default": "postgres",
+              "description": "the database admin password, if not set by secret",
+              "title": "password"
+            },
+            "secret": {
+              "default": "",
+              "description": "the secret with credentials (account, password) for the database admin account. This setting has priority over adminAccount and adminPassword",
+              "title": "secret"
+            }
+          },
+          "title": "dbAdmin",
+          "type": "object"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "bitnami/postgresql",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "default": "",
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "15",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "yaml-language-server: $schema=values.schema.json",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "5432",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "database",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/bitnami/postgresql/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "30Gi",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "priority": {
+          "additionalProperties": false,
+          "description": "You can give a component a specific priorityClass to implement a quality of service. You can leave this empty, then no priority is set. If you set a class, this class is taken If you additionally enable create, the class is created for you with the value defined.",
+          "properties": {
+            "className": {
+              "default": "",
+              "description": "Set the priority class for the Application Layer deployment if desired",
+              "title": "className"
+            },
+            "createClass": {
+              "default": "",
+              "description": "Creates an individual PriorityClass for this instance",
+              "title": "createClass"
+            },
+            "value": {
+              "default": "1000000",
+              "description": "Sets the priorityValue",
+              "title": "value"
+            }
+          },
+          "title": "priority"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "The replicaCount for the Database should never be changed @ignore",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-component-database",
+      "type": "object"
+    },
+    "dav": {
+      "description": "Provides WebDAV access to environment resources such as the conf PVC and the ptemp PVC",
+      "properties": {
+        "account": {
+          "default": "admin",
+          "description": "the dav user",
+          "title": "account"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "toolbox2",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "cr.nplus.cloud/subscription",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "1.2.1300",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/dav",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8080",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8443",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "envdav",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "password": {
+          "default": "admin",
+          "description": "password of the dav user",
+          "title": "password"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "1",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "512Mi",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "1m",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "64Mi",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "secret": {
+          "default": "",
+          "description": "Alternatively, define a secret",
+          "title": "secret"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-environment-dav",
+      "type": "object"
+    },
+    "dmsapi": {
+      "description": "eon DMS-API provides a eon Standard Interface to the Instance",
+      "properties": {
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "dms-api",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "cr.nplus.cloud/subscription",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "9.2.1200",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/dms_api",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "9443",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "dms-api",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "dmsapi",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCount": {
+          "default": "",
+          "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+          "title": "minReplicaCount"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/tomcat/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/tomcat/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "updateStrategy": {
+          "default": "",
+          "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+          "title": "updateStrategy"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "eon-dms-api",
+      "type": "object"
+    },
+    "erpcmis": {
+      "description": "nscale ERP CMIS, providing SAP S/4 HANA Public Cloud Archive Access",
+      "properties": {
+        "alien": {
+          "additionalProperties": false,
+          "properties": {
+            "doAppend": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "doAppend"
+            },
+            "port": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "port"
+            },
+            "server": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "server"
+            },
+            "ssl": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "ssl"
+            },
+            "url": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "url"
+            },
+            "useSign": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "useSign"
+            }
+          },
+          "title": "alien",
+          "type": "object"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "erp-cmis-connector",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.2.1000.2024032720",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/cmis/browser",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8096",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8196",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "erpcmis-connector",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "erpcmis",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "migration": {
+          "additionalProperties": false,
+          "properties": {
+            "checkDocuments": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "checkDocuments"
+            },
+            "checkIgnoreTime": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "checkIgnoreTime"
+            },
+            "delay": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "delay"
+            },
+            "doListMigration": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "doListMigration"
+            },
+            "enabled": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "enabled"
+            },
+            "fileDelimiter": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "fileDelimiter"
+            },
+            "viaFileSystem": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "viaFileSystem"
+            }
+          },
+          "title": "migration",
+          "type": "object"
+        },
+        "minReplicaCount": {
+          "default": "",
+          "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+          "title": "minReplicaCount"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-for-sap/erp-cmis/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-for-sap/erp-cmis/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-for-sap/erp-cmis/temp",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "sign": {
+          "additionalProperties": false,
+          "properties": {
+            "authID": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "authID"
+            },
+            "keyAlias": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "keyAlias"
+            },
+            "keyPassword": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "keyPassword"
+            }
+          },
+          "title": "sign",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "updateStrategy": {
+          "default": "",
+          "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+          "title": "updateStrategy"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        },
+        "xsap": {
+          "additionalProperties": false,
+          "properties": {
+            "useSign": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+              "title": "useSign"
+            }
+          },
+          "title": "xsap",
+          "type": "object"
+        }
+      },
+      "title": "nplus-component-erpcmis",
+      "type": "object"
+    },
+    "erpproxy": {
+      "description": "nscale ERP Proxy, providing SAP Archive Link access to alien Archive Components",
+      "properties": {
+        "alien": {
+          "additionalProperties": false,
+          "properties": {
+            "doAppend": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "doAppend"
+            },
+            "port": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "port"
+            },
+            "server": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "server"
+            },
+            "ssl": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "ssl"
+            },
+            "url": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "url"
+            },
+            "useSign": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "useSign"
+            }
+          },
+          "title": "alien",
+          "type": "object"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "sap-proxy-connector",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/pre-release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1000.2024092409",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/sap_proxy",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8097",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8197",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "erpproxy-connector",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "erpproxy",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "migration": {
+          "additionalProperties": false,
+          "properties": {
+            "checkDocuments": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "checkDocuments"
+            },
+            "checkIgnoreTime": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "checkIgnoreTime"
+            },
+            "delay": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "delay"
+            },
+            "doListMigration": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "doListMigration"
+            },
+            "enabled": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "enabled"
+            },
+            "fileDelimiter": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "fileDelimiter"
+            },
+            "viaFileSystem": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "viaFileSystem"
+            }
+          },
+          "title": "migration",
+          "type": "object"
+        },
+        "minReplicaCount": {
+          "default": "",
+          "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+          "title": "minReplicaCount"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-for-sap/sap-proxy/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-for-sap/sap-proxy/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-for-sap/sap-proxy/temp",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "sign": {
+          "additionalProperties": false,
+          "properties": {
+            "authID": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "authID"
+            },
+            "keyAlias": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "keyAlias"
+            },
+            "keyPassword": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "keyPassword"
+            }
+          },
+          "title": "sign",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "updateStrategy": {
+          "default": "",
+          "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+          "title": "updateStrategy"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        },
+        "xsap": {
+          "additionalProperties": false,
+          "properties": {
+            "url": {
+              "default": "{{ printf \"%s/%s\" ($.this.nappl).instance \"xsap/cs/xsap\"}}",
+              "description": "xsap url to use.",
+              "title": "url"
+            },
+            "useSign": {
+              "default": "",
+              "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+              "title": "useSign"
+            }
+          },
+          "title": "xsap",
+          "type": "object"
+        }
+      },
+      "title": "nplus-component-erpproxy",
+      "type": "object"
+    },
+    "global": {
+      "additionalProperties": false,
+      "properties": {
+        "database": {
+          "additionalProperties": false,
+          "properties": {
+            "account": {
+              "default": "nscale",
+              "description": "DB account (if not using a secret)",
+              "title": "account"
+            },
+            "dialect": {
+              "default": "PostgreSQL",
+              "description": "nscale DB server dialect",
+              "title": "dialect"
+            },
+            "driverclass": {
+              "default": "org.postgresql.Driver",
+              "description": "nscale DB server driverclass",
+              "title": "driverclass"
+            },
+            "name": {
+              "default": "nscale",
+              "description": "name of the nscale DB",
+              "title": "name"
+            },
+            "password": {
+              "default": "nscale",
+              "description": "DB password (if not using a secret)",
+              "title": "password"
+            },
+            "passwordEncoded": {
+              "default": "false",
+              "description": "weather the password is stored encrypted",
+              "title": "passwordEncoded"
+            },
+            "schema": {
+              "default": "public",
+              "description": "DB schema name",
+              "title": "schema"
+            },
+            "secret": {
+              "default": "",
+              "description": "DB credential secret (account, password)",
+              "title": "secret"
+            },
+            "url": {
+              "default": "jdbc:postgresql://{{ .component.prefix }}database:5432/{{ .this.database.name }}",
+              "description": "The URL to the database",
+              "title": "url"
+            }
+          },
+          "title": "database",
+          "type": "object"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "properties": {
+            "appRoot": {
+              "default": "/nscale_web",
+              "description": "Sets the root for this instance, where incoming root traffic should be redirected to",
+              "title": "appRoot"
+            },
+            "class": {
+              "default": "`public``",
+              "description": "sets the global ingressclass for all components to use - if they do not define a specific one, for example if there are separate controllers for internal and external traffic",
+              "title": "class"
+            },
+            "createSelfSignedCertificate": {
+              "default": "true",
+              "description": "if you do not define an issuer to generate the tls secret for you, you still can have a self signed certificate generated for you, if you set this to true. The default is true, so either you have an issuer or not, you will always end up with a certificate. Set an empty issuer and createSelfSignedCertificate to false to have no certificate generated and use an external or existing secret. Then make sure the secret matches.",
+              "title": "createSelfSignedCertificate"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the global domain within the instance to be used, if the component does not define any domain. If this remains empty, no ingress is generated Example: `{{ .instance.group }}.lab.nplus.cloud`",
+              "title": "domain"
+            },
+            "issuer": {
+              "default": "",
+              "description": "Sets the name of the issuer to create the tls secret. Very common is to have it created by  cert-manager. Please see the documentation how to create a cert-manager cluster issuer for example. If no issuer is set, no certificate request will be generated",
+              "title": "issuer"
+            },
+            "namespace": {
+              "default": "`ingress, kube-system, ingress-nginx`",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. This secret is then either generated by cert-manager or self signed by helm - or not created",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress",
+          "type": "object"
+        },
+        "instance": {
+          "additionalProperties": false,
+          "properties": {
+            "group": {
+              "default": "",
+              "description": "The group of the instance. This is used for the networkPolicies. Only Pods within one group are allowed to communicate if you enable the nplus Network Policies. By default, this is set the same as the instance name",
+              "title": "group"
+            },
+            "name": {
+              "default": "{{ .Release.Name }}",
+              "description": "The name of the instance. Should this name be identical to the namespace name, then  the prefix will be dropped. By default, this is the .Release.Name",
+              "title": "name"
+            }
+          },
+          "title": "instance",
+          "type": "object"
+        },
+        "license": {
+          "default": "nscale-license",
+          "description": "Globally set the license secret name",
+          "title": "license"
+        },
+        "logForwarderImage": {
+          "additionalProperties": false,
+          "properties": {
+            "name": {
+              "default": "fluent-bit",
+              "description": "defines the nplus toolbox name to be used for the *wait* feature",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "description": "defines the nplus toolbox pull policy to be used for the *wait* feature",
+              "title": "pullPolicy"
+            },
+            "repo": {
+              "default": "cr.fluentbit.io/fluent",
+              "description": "defines the nplus toolbox image to be used for the *wait* feature",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "2.0",
+              "description": "defines the tag for the logforwarder (FluentBit) @internal -- set by devOps pipeline, so do not modify",
+              "title": "tag"
+            }
+          },
+          "title": "logForwarderImage",
+          "type": "object"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "nscaleVersion": {
+              "default": "9.3.1300",
+              "description": "Sets the nscale version of this deployment / instance. This is used by the operator to display the correct version e.g. in the Web UI. @internal -- this is set by the devOps pipeline, so do not modify",
+              "title": "nscaleVersion"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "properties": {
+            "account": {
+              "default": "admin",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "domain": {
+              "default": "nscale",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "{{ .component.prefix }}nappl.{{ .Release.Namespace }}",
+              "description": "sets the *nscale Server Application Layer* host to be used. As this is a global option, it can be overridden at component level.",
+              "title": "host"
+            },
+            "instance": {
+              "default": "nscalealinst1",
+              "description": "the instance of *nscale Server Application Layer* to be used @internal -- As this is depricated for nscale 10, you should never modify this.",
+              "title": "instance"
+            },
+            "password": {
+              "default": "admin",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "8080",
+              "description": "sets the *nscale Server Application Layer* port to be used. As this is a global option, it can be overridden at component level. if you switch to zero trus mode or change the nappl backend to https, you want to modify this port to 8443",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "false",
+              "description": "wether to use ssl or not for the advanced connector",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl",
+          "type": "object"
+        },
+        "security": {
+          "additionalProperties": false,
+          "properties": {
+            "cni": {
+              "additionalProperties": false,
+              "properties": {
+                "administratorInstance": {
+                  "default": "{{ .this.instance.name }}",
+                  "description": "sets the instance, from which Administration is allowed",
+                  "title": "administratorInstance"
+                },
+                "administratorNamespace": {
+                  "default": "{{ .Release.Namespace }}",
+                  "description": "sets the namespace, from which Administration is allowed",
+                  "title": "administratorNamespace"
+                },
+                "createNetworkPolicy": {
+                  "default": "",
+                  "description": "creates NetworkPolicies for each  component.",
+                  "title": "createNetworkPolicy"
+                },
+                "defaultEgressPolicy": {
+                  "default": "",
+                  "description": "if defined, creates a default NetworkPolicy to handle  egress Traffic from the instance. Possible Values: deny, allow, none",
+                  "title": "defaultEgressPolicy"
+                },
+                "defaultIngressPolicy": {
+                  "default": "",
+                  "description": "if defined, creates a default NetworkPolicy to handle  ingress Traffic to the instance. Possible Values: deny, allow, none",
+                  "title": "defaultIngressPolicy"
+                },
+                "monitoringInstance": {
+                  "default": "{{ .this.instance.name }}",
+                  "description": "sets the instance, from which Monitoring is allowed",
+                  "title": "monitoringInstance"
+                },
+                "monitoringNamespace": {
+                  "default": "{{ .Release.Namespace }}",
+                  "description": "sets the namespace, from which Monitoring is allowed",
+                  "title": "monitoringNamespace"
+                },
+                "pamInstance": {
+                  "default": "{{ .this.instance.name }}",
+                  "description": "sets the instance, from which Process Automation Modeling is allowed",
+                  "title": "pamInstance"
+                },
+                "pamNamespace": {
+                  "default": "{{ .Release.Namespace }}",
+                  "description": "sets the namespace, from which Process Automation Modeling is allowed",
+                  "title": "pamNamespace"
+                }
+              },
+              "title": "cni",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "",
+              "description": "enables zero trust on the instance. When enabled, no unencrypted http connection is allowed. This will remove all http ports from pods, services, network policies and ingress rules",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "if you use a OpenTelemetry as a telemetry collector, you can enable it here. This will add the annotations to some known pods for the injector to use agents inside the pods for telemetry collection.  This often goes along with the `language` setting in the meta section to tell the  telemetry collector which agent to inject.",
+              "title": "openTelemetry"
+            }
+          },
+          "title": "telemetry",
+          "type": "object"
+        },
+        "waitImage": {
+          "additionalProperties": false,
+          "properties": {
+            "name": {
+              "default": "toolbox2",
+              "description": "defines the nplus toolbox name to be used for the *wait* feature",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "description": "defines the nplus toolbox pull policy to be used for the *wait* feature",
+              "title": "pullPolicy"
+            },
+            "repo": {
+              "default": "cr.nplus.cloud/subscription",
+              "description": "defines the nplus toolbox image to be used for the *wait* feature",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "1.2.1300",
+              "description": "defines the nplus toolbox tag to be used for the *wait* feature @internal -- set by devOps pipeline, so do not modify",
+              "title": "tag"
+            }
+          },
+          "title": "waitImage",
+          "type": "object"
+        }
+      },
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "ilm": {
+      "description": "nscale ILM Connector, providing a certified SAP ILM interface",
+      "properties": {
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "ilm-connector",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1000.2024091702",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/sap_ilm",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8297",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8397",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "ilm-connector",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "ilm",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCount": {
+          "default": "",
+          "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+          "title": "minReplicaCount"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/temp",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "updateStrategy": {
+          "default": "",
+          "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+          "title": "updateStrategy"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-ilm",
+      "type": "object"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "properties": {
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        }
+      },
+      "title": "meta",
+      "type": "object"
+    },
+    "mon": {
+      "description": "nscale Monitoring Console, used to provide sensor information from all components to dashboards",
+      "properties": {
+        "activateRmi": {
+          "default": "false",
+          "description": "Activates the RMI Interface. Due to security concern, this defaults to `false`",
+          "title": "activateRmi"
+        },
+        "activateSsl": {
+          "default": "true",
+          "description": "Activates SSL / TLS communication",
+          "title": "activateSsl"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "monitoring-console",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1000.2024092618",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/nscalemc",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8387",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8388",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "8389",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "monitoring-console",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "mon",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-monitoring/workspace",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "10Gi",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-monitoring/workspace/license.xml",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "There should only be a single Monitoring instance, so the replicaCount is fixed to 1 @ignore -- Do not change this.",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-mon",
+      "type": "object"
+    },
+    "nappl": {
+      "description": "nscale Server Application Layer, the central component in the nscale ecosystem",
+      "properties": {
+        "database": {
+          "additionalProperties": false,
+          "description": "If you define the database in your values, this DB settings are taken. If you leave this empty, the settings from the config file are used.",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "alternative 1: the account name of the technical DB user for nscale",
+              "title": "account"
+            },
+            "dialect": {
+              "default": "",
+              "description": "the database dialect to use",
+              "title": "dialect"
+            },
+            "driverclass": {
+              "default": "",
+              "description": "the driver class to use",
+              "title": "driverclass"
+            },
+            "name": {
+              "default": "",
+              "description": "the name of the database to use",
+              "title": "name"
+            },
+            "password": {
+              "default": "",
+              "description": "alternative 1: the password of the technical DB user for nscale",
+              "title": "password"
+            },
+            "passwordEncoded": {
+              "default": "",
+              "description": "weather the DB password is stored encrypted",
+              "title": "passwordEncoded"
+            },
+            "schema": {
+              "default": "",
+              "description": "the database schema to use",
+              "title": "schema"
+            },
+            "secret": {
+              "default": "",
+              "description": "alternative 2: use a secret for the account and password",
+              "title": "secret"
+            },
+            "url": {
+              "default": "",
+              "description": "the DB URL",
+              "title": "url"
+            }
+          },
+          "title": "database"
+        },
+        "disableSessionReplication": {
+          "default": "",
+          "description": "enables/disables the session replication for these cluster members.",
+          "title": "disableSessionReplication"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "application-layer",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1300.2024121814",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/nscalealinst1",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "includeDefaultPaths": {
+              "default": "true",
+              "description": "toggles default paths like index.html, res and engine.properties",
+              "title": "includeDefaultPaths"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "jobs": {
+          "default": "true",
+          "description": "enables/disables the job affinity / priority for these cluster members",
+          "title": "jobs"
+        },
+        "kubePing": {
+          "additionalProperties": false,
+          "description": "sets the serviceAccount for NAPPL. Up to 9.1.1100, this was needed for  the cluster communication (kubePing). Starting 9.1.1201, this is not the case any more If it is left empty, also the automountServiceAccountToken is disabled. If you set Values, they are ignored in Versions > 9.1.1200",
+          "properties": {
+            "create": {
+              "default": "true",
+              "description": "Creates the ServiceAccount (only if Version < 9.1.1200) Later Versions use a Cluster Service and resolve the IP Adresses from the EndpointSlices",
+              "title": "create"
+            },
+            "name": {
+              "default": "{{ .component.fullName }}-kubeping",
+              "description": "Set the ServiceAccount Name for the kubePing Protocol",
+              "title": "name"
+            }
+          },
+          "title": "kubePing"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8080",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8443",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "application-layer",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "core",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCount": {
+          "default": "",
+          "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+          "title": "minReplicaCount"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/application-layer/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "/usr/share/fonts/truetype/nplus",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/application-layer/conf/license.xml",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/application-layer/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "5Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "additionalProperties": false,
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "priority": {
+          "additionalProperties": false,
+          "description": "You can give a component a specific priorityClass to implement a quality of service. You can leave this empty, then no priority is set. If you set a class, this class is taken If you additionally enable create, the class is created for you with the value defined.",
+          "properties": {
+            "className": {
+              "default": "",
+              "description": "Set the priority class for the Application Layer deployment if desired",
+              "title": "className"
+            },
+            "createClass": {
+              "default": "true",
+              "description": "Creates an individual PriorityClass for this instance",
+              "title": "createClass"
+            },
+            "value": {
+              "default": "1000000",
+              "description": "Sets the priorityValue",
+              "title": "value"
+            }
+          },
+          "title": "priority"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "cni": {
+              "additionalProperties": false,
+              "properties": {
+                "dbIpRange": {
+                  "default": "",
+                  "description": "defines the IP Range of out-of-cluster DB Servers, that the nappl is allowed to communicate with.",
+                  "title": "dbIpRange"
+                },
+                "sapIpRange": {
+                  "default": "",
+                  "description": "defines the IP Range of out-of-cluster SAP Servers, that the nappl is allowed to communicate with.",
+                  "title": "sapIpRange"
+                }
+              },
+              "title": "cni",
+              "type": "object"
+            },
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "sessionCacheStorageType": {
+          "default": "",
+          "description": "Sets the Session Cache Storage Type to HEAP or OFF_HEAP",
+          "title": "sessionCacheStorageType"
+        },
+        "snc": {
+          "additionalProperties": false,
+          "properties": {
+            "enabled": {
+              "default": "false",
+              "description": "Enables the NAPPL SNC to access SAP Systems. Since nscale 8, the configuration is done in the Administration Client.",
+              "title": "enabled"
+            }
+          },
+          "title": "snc",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "description": "Set tolerations for this component",
+          "items": {},
+          "title": "tolerations"
+        },
+        "updateStrategy": {
+          "default": "RollingUpdate",
+          "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+          "title": "updateStrategy"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-nappl",
+      "type": "object"
+    },
+    "nappljobs": {
+      "description": "nscale Server Application Layer, the central component in the nscale ecosystem",
+      "properties": {
+        "database": {
+          "additionalProperties": false,
+          "description": "If you define the database in your values, this DB settings are taken. If you leave this empty, the settings from the config file are used.",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "alternative 1: the account name of the technical DB user for nscale",
+              "title": "account"
+            },
+            "dialect": {
+              "default": "",
+              "description": "the database dialect to use",
+              "title": "dialect"
+            },
+            "driverclass": {
+              "default": "",
+              "description": "the driver class to use",
+              "title": "driverclass"
+            },
+            "name": {
+              "default": "",
+              "description": "the name of the database to use",
+              "title": "name"
+            },
+            "password": {
+              "default": "",
+              "description": "alternative 1: the password of the technical DB user for nscale",
+              "title": "password"
+            },
+            "passwordEncoded": {
+              "default": "",
+              "description": "weather the DB password is stored encrypted",
+              "title": "passwordEncoded"
+            },
+            "schema": {
+              "default": "",
+              "description": "the database schema to use",
+              "title": "schema"
+            },
+            "secret": {
+              "default": "",
+              "description": "alternative 2: use a secret for the account and password",
+              "title": "secret"
+            },
+            "url": {
+              "default": "",
+              "description": "the DB URL",
+              "title": "url"
+            }
+          },
+          "title": "database"
+        },
+        "disableSessionReplication": {
+          "default": "",
+          "description": "enables/disables the session replication for these cluster members.",
+          "title": "disableSessionReplication"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "application-layer",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1300.2024121814",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/nscalealinst1",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "includeDefaultPaths": {
+              "default": "true",
+              "description": "toggles default paths like index.html, res and engine.properties",
+              "title": "includeDefaultPaths"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "jobs": {
+          "default": "true",
+          "description": "enables/disables the job affinity / priority for these cluster members",
+          "title": "jobs"
+        },
+        "kubePing": {
+          "additionalProperties": false,
+          "description": "sets the serviceAccount for NAPPL. Up to 9.1.1100, this was needed for  the cluster communication (kubePing). Starting 9.1.1201, this is not the case any more If it is left empty, also the automountServiceAccountToken is disabled. If you set Values, they are ignored in Versions > 9.1.1200",
+          "properties": {
+            "create": {
+              "default": "true",
+              "description": "Creates the ServiceAccount (only if Version < 9.1.1200) Later Versions use a Cluster Service and resolve the IP Adresses from the EndpointSlices",
+              "title": "create"
+            },
+            "name": {
+              "default": "{{ .component.fullName }}-kubeping",
+              "description": "Set the ServiceAccount Name for the kubePing Protocol",
+              "title": "name"
+            }
+          },
+          "title": "kubePing"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8080",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8443",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "application-layer",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "core",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCount": {
+          "default": "",
+          "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+          "title": "minReplicaCount"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/application-layer/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "/usr/share/fonts/truetype/nplus",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/application-layer/conf/license.xml",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/application-layer/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "5Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "additionalProperties": false,
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "priority": {
+          "additionalProperties": false,
+          "description": "You can give a component a specific priorityClass to implement a quality of service. You can leave this empty, then no priority is set. If you set a class, this class is taken If you additionally enable create, the class is created for you with the value defined.",
+          "properties": {
+            "className": {
+              "default": "",
+              "description": "Set the priority class for the Application Layer deployment if desired",
+              "title": "className"
+            },
+            "createClass": {
+              "default": "true",
+              "description": "Creates an individual PriorityClass for this instance",
+              "title": "createClass"
+            },
+            "value": {
+              "default": "1000000",
+              "description": "Sets the priorityValue",
+              "title": "value"
+            }
+          },
+          "title": "priority"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "cni": {
+              "additionalProperties": false,
+              "properties": {
+                "dbIpRange": {
+                  "default": "",
+                  "description": "defines the IP Range of out-of-cluster DB Servers, that the nappl is allowed to communicate with.",
+                  "title": "dbIpRange"
+                },
+                "sapIpRange": {
+                  "default": "",
+                  "description": "defines the IP Range of out-of-cluster SAP Servers, that the nappl is allowed to communicate with.",
+                  "title": "sapIpRange"
+                }
+              },
+              "title": "cni",
+              "type": "object"
+            },
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "sessionCacheStorageType": {
+          "default": "",
+          "description": "Sets the Session Cache Storage Type to HEAP or OFF_HEAP",
+          "title": "sessionCacheStorageType"
+        },
+        "snc": {
+          "additionalProperties": false,
+          "properties": {
+            "enabled": {
+              "default": "false",
+              "description": "Enables the NAPPL SNC to access SAP Systems. Since nscale 8, the configuration is done in the Administration Client.",
+              "title": "enabled"
+            }
+          },
+          "title": "snc",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "description": "Set tolerations for this component",
+          "items": {},
+          "title": "tolerations"
+        },
+        "updateStrategy": {
+          "default": "RollingUpdate",
+          "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+          "title": "updateStrategy"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-nappl",
+      "type": "object"
+    },
+    "nstl": {
+      "description": "nscale Server Storage Layer, virtualizing the storage to be used by the nscale Server",
+      "properties": {
+        "accounting": {
+          "default": "",
+          "description": "sets and enables / disables the accounting function. If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`) The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths`",
+          "title": "accounting"
+        },
+        "checkHighestDocId": {
+          "default": "",
+          "description": "enables checking the highest DocID when starting the server. this only makes sense, if you also set a separate volume for the highest ID This is a backup / restore feature to avoid data mangling",
+          "title": "checkHighestDocId"
+        },
+        "dvCheckPath": {
+          "default": "",
+          "description": "sets the path of the highest ID file.",
+          "title": "dvCheckPath"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "storage-layer",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1201.2024112518",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "ingress settings. however, the nstl does not use http, so a layer 7 LB does not make any sense. @ignore",
+          "properties": {
+            "enabled": {
+              "default": "false",
+              "description": "enables ingress on this component do not change this! @ignore",
+              "title": "enabled"
+            }
+          },
+          "title": "ingress"
+        },
+        "logForwarder": {
+          "default": "",
+          "title": "logForwarder",
+          "type": "null"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "cpp",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "3005",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "3006",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "storage-layer",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "nstl",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/storage-layer/etc",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "50Gi",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "50Gi",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/storage-layer/etc/license.xml",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "medium": {
+                  "default": "",
+                  "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                  "title": "medium"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "5Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "500Mi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "cni": {
+              "additionalProperties": false,
+              "properties": {
+                "nstlIpRange": {
+                  "default": "",
+                  "description": "You might want to access storage layer outside the cluster (proxy concept) To do so, you can add a specific IP Range here, which is set within the  network policy.",
+                  "title": "nstlIpRange"
+                }
+              },
+              "title": "cni",
+              "type": "object"
+            },
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsNonRoot": {
+                  "default": true,
+                  "title": "runAsNonRoot",
+                  "type": "boolean"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-component-nstl",
+      "type": "object"
+    },
+    "nstla": {
+      "description": "nscale Server Storage Layer, virtualizing the storage to be used by the nscale Server",
+      "properties": {
+        "accounting": {
+          "default": "",
+          "description": "sets and enables / disables the accounting function. If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`) The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths`",
+          "title": "accounting"
+        },
+        "checkHighestDocId": {
+          "default": "",
+          "description": "enables checking the highest DocID when starting the server. this only makes sense, if you also set a separate volume for the highest ID This is a backup / restore feature to avoid data mangling",
+          "title": "checkHighestDocId"
+        },
+        "dvCheckPath": {
+          "default": "",
+          "description": "sets the path of the highest ID file.",
+          "title": "dvCheckPath"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "storage-layer",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1201.2024112518",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "ingress settings. however, the nstl does not use http, so a layer 7 LB does not make any sense. @ignore",
+          "properties": {
+            "enabled": {
+              "default": "false",
+              "description": "enables ingress on this component do not change this! @ignore",
+              "title": "enabled"
+            }
+          },
+          "title": "ingress"
+        },
+        "logForwarder": {
+          "default": "",
+          "title": "logForwarder",
+          "type": "null"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "cpp",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "3005",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "3006",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "storage-layer",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "nstl",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/storage-layer/etc",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "50Gi",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "50Gi",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/storage-layer/etc/license.xml",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "medium": {
+                  "default": "",
+                  "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                  "title": "medium"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "5Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "500Mi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "cni": {
+              "additionalProperties": false,
+              "properties": {
+                "nstlIpRange": {
+                  "default": "",
+                  "description": "You might want to access storage layer outside the cluster (proxy concept) To do so, you can add a specific IP Range here, which is set within the  network policy.",
+                  "title": "nstlIpRange"
+                }
+              },
+              "title": "cni",
+              "type": "object"
+            },
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsNonRoot": {
+                  "default": true,
+                  "title": "runAsNonRoot",
+                  "type": "boolean"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-component-nstl",
+      "type": "object"
+    },
+    "nstlb": {
+      "description": "nscale Server Storage Layer, virtualizing the storage to be used by the nscale Server",
+      "properties": {
+        "accounting": {
+          "default": "",
+          "description": "sets and enables / disables the accounting function. If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`) The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths`",
+          "title": "accounting"
+        },
+        "checkHighestDocId": {
+          "default": "",
+          "description": "enables checking the highest DocID when starting the server. this only makes sense, if you also set a separate volume for the highest ID This is a backup / restore feature to avoid data mangling",
+          "title": "checkHighestDocId"
+        },
+        "dvCheckPath": {
+          "default": "",
+          "description": "sets the path of the highest ID file.",
+          "title": "dvCheckPath"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "storage-layer",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1201.2024112518",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "ingress settings. however, the nstl does not use http, so a layer 7 LB does not make any sense. @ignore",
+          "properties": {
+            "enabled": {
+              "default": "false",
+              "description": "enables ingress on this component do not change this! @ignore",
+              "title": "enabled"
+            }
+          },
+          "title": "ingress"
+        },
+        "logForwarder": {
+          "default": "",
+          "title": "logForwarder",
+          "type": "null"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "cpp",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "3005",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "3006",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "storage-layer",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "nstl",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/storage-layer/etc",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "50Gi",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "50Gi",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/storage-layer/etc/license.xml",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "medium": {
+                  "default": "",
+                  "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                  "title": "medium"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "5Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "500Mi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "cni": {
+              "additionalProperties": false,
+              "properties": {
+                "nstlIpRange": {
+                  "default": "",
+                  "description": "You might want to access storage layer outside the cluster (proxy concept) To do so, you can add a specific IP Range here, which is set within the  network policy.",
+                  "title": "nstlIpRange"
+                }
+              },
+              "title": "cni",
+              "type": "object"
+            },
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsNonRoot": {
+                  "default": true,
+                  "title": "runAsNonRoot",
+                  "type": "boolean"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-component-nstl",
+      "type": "object"
+    },
+    "nstlc": {
+      "description": "nscale Server Storage Layer, virtualizing the storage to be used by the nscale Server",
+      "properties": {
+        "accounting": {
+          "default": "",
+          "description": "sets and enables / disables the accounting function. If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`) The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths`",
+          "title": "accounting"
+        },
+        "checkHighestDocId": {
+          "default": "",
+          "description": "enables checking the highest DocID when starting the server. this only makes sense, if you also set a separate volume for the highest ID This is a backup / restore feature to avoid data mangling",
+          "title": "checkHighestDocId"
+        },
+        "dvCheckPath": {
+          "default": "",
+          "description": "sets the path of the highest ID file.",
+          "title": "dvCheckPath"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "storage-layer",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1201.2024112518",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "ingress settings. however, the nstl does not use http, so a layer 7 LB does not make any sense. @ignore",
+          "properties": {
+            "enabled": {
+              "default": "false",
+              "description": "enables ingress on this component do not change this! @ignore",
+              "title": "enabled"
+            }
+          },
+          "title": "ingress"
+        },
+        "logForwarder": {
+          "default": "",
+          "title": "logForwarder",
+          "type": "null"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "cpp",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "3005",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "3006",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "storage-layer",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "nstl",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/storage-layer/etc",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "50Gi",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "50Gi",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/storage-layer/etc/license.xml",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "medium": {
+                  "default": "",
+                  "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                  "title": "medium"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "5Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "500Mi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "cni": {
+              "additionalProperties": false,
+              "properties": {
+                "nstlIpRange": {
+                  "default": "",
+                  "description": "You might want to access storage layer outside the cluster (proxy concept) To do so, you can add a specific IP Range here, which is set within the  network policy.",
+                  "title": "nstlIpRange"
+                }
+              },
+              "title": "cni",
+              "type": "object"
+            },
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsNonRoot": {
+                  "default": true,
+                  "title": "runAsNonRoot",
+                  "type": "boolean"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-component-nstl",
+      "type": "object"
+    },
+    "nstld": {
+      "description": "nscale Server Storage Layer, virtualizing the storage to be used by the nscale Server",
+      "properties": {
+        "accounting": {
+          "default": "",
+          "description": "sets and enables / disables the accounting function. If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`) The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths`",
+          "title": "accounting"
+        },
+        "checkHighestDocId": {
+          "default": "",
+          "description": "enables checking the highest DocID when starting the server. this only makes sense, if you also set a separate volume for the highest ID This is a backup / restore feature to avoid data mangling",
+          "title": "checkHighestDocId"
+        },
+        "dvCheckPath": {
+          "default": "",
+          "description": "sets the path of the highest ID file.",
+          "title": "dvCheckPath"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "storage-layer",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1201.2024112518",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "ingress settings. however, the nstl does not use http, so a layer 7 LB does not make any sense. @ignore",
+          "properties": {
+            "enabled": {
+              "default": "false",
+              "description": "enables ingress on this component do not change this! @ignore",
+              "title": "enabled"
+            }
+          },
+          "title": "ingress"
+        },
+        "logForwarder": {
+          "default": "",
+          "title": "logForwarder",
+          "type": "null"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "cpp",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "3005",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "3006",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "storage-layer",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "nstl",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/storage-layer/etc",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "50Gi",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "50Gi",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/storage-layer/etc/license.xml",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "medium": {
+                  "default": "",
+                  "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                  "title": "medium"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "5Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "500Mi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "cni": {
+              "additionalProperties": false,
+              "properties": {
+                "nstlIpRange": {
+                  "default": "",
+                  "description": "You might want to access storage layer outside the cluster (proxy concept) To do so, you can add a specific IP Range here, which is set within the  network policy.",
+                  "title": "nstlIpRange"
+                }
+              },
+              "title": "cni",
+              "type": "object"
+            },
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsNonRoot": {
+                  "default": true,
+                  "title": "runAsNonRoot",
+                  "type": "boolean"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-component-nstl",
+      "type": "object"
+    },
+    "operator": {
+      "description": "Installs the nplus operator managin the custom resource definitions for nplus and nscale",
+      "properties": {
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "operator",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "cr.nplus.cloud/subscription",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "1.2.1300",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/monitoring",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8080",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8443",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "envoperator",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "1",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "512Mi",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "1m",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "64Mi",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "ui": {
+          "default": "true",
+          "description": "Enables the web ui, default under /monitoring",
+          "title": "ui"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-environment-operator",
+      "type": "object"
+    },
+    "pam": {
+      "description": "nscale Process Automation Modeler, providing Web UI Modeler for PAP",
+      "properties": {
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "process-automation-modeler",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1200.63696",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/modeler",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8092",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "pam",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "pam",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/process-automation-modeler/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/process-automation-modeler/apache/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "As this is a Admin component, there is no HA or anything so we stick to exactly 1 replica. @ignore -- Fix Value",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-pam",
+      "type": "object"
+    },
+    "pipeliner": {
+      "description": "nscale Pipeliner, the mass import / export tool of nscale",
+      "properties": {
+        "dav": {
+          "additionalProperties": false,
+          "properties": {
+            "account": {
+              "default": "pipeliner",
+              "description": "the dav user",
+              "title": "account"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "the Image to use for the DAV server",
+              "properties": {
+                "name": {
+                  "default": "toolbox2",
+                  "title": "name",
+                  "type": "string"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "description": "the DAV server image pull policy",
+                  "title": "pullPolicy"
+                },
+                "repo": {
+                  "default": "cr.nplus.cloud/subscription",
+                  "title": "repo",
+                  "type": "string"
+                },
+                "tag": {
+                  "default": "1.2.1300",
+                  "title": "tag",
+                  "type": "string"
+                }
+              },
+              "title": "image"
+            },
+            "password": {
+              "default": "pipeliner",
+              "description": "password of the dav user",
+              "title": "password"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternatively, define a secret",
+              "title": "secret"
+            }
+          },
+          "title": "dav",
+          "type": "object"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "pipeliner",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1300.2024121815",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/{{ .component.name }}",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "cpp",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8080",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "4173",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "pipeliner",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "pipeliner",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-pipeliner/workdir",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "10Gi",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "defaultConfig": {
+              "default": "{{ .component.fullName }}-defaultconfig",
+              "description": "Sets a configMap with default configuration files that get copied to a new and empty container just before the template folder gets copied. Existing files are not overwritten.",
+              "title": "defaultConfig"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-pipeliner/workdir/license.xml",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-pipeliner/workdir/log",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "0",
+          "description": "Default ReplicaCount is 0 as the pipeliner requires a working cold.xml",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-pipeliner",
+      "type": "object"
+    },
+    "prepper": {
+      "description": "nplus Prepper, used to deploy assets prior to component deployment",
+      "properties": {
+        "download": {
+          "default": "",
+          "description": "A list of URLs (Links) to Assets to download before anything else if the download is a .tar.gz, it is automatically untared to /pool/downloads",
+          "title": "download"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "toolbox2",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "cr.nplus.cloud/subscription",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "1.2.1300",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "yaml-language-server: $schema=values.schema.json",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "application",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/application",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "/pool",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "/tmp",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "nstl": {
+          "additionalProperties": false,
+          "properties": {
+            "host": {
+              "default": "",
+              "description": "The dns of the *nscale Server Storage Layer*. This is used to add it to the nappl configuration",
+              "title": "host"
+            }
+          },
+          "title": "nstl",
+          "type": "object"
+        },
+        "prerun": {
+          "default": "",
+          "description": "A list of scripts to run before the deployment of Apps",
+          "title": "prerun"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "rs": {
+          "additionalProperties": false,
+          "properties": {
+            "host": {
+              "default": "",
+              "description": "The dns of the *nscale rendition Server*. This is used to add it to the nappl configuration",
+              "title": "host"
+            }
+          },
+          "title": "rs",
+          "type": "object"
+        },
+        "run": {
+          "default": "",
+          "description": "A list of scripts to run after the deployment of Apps",
+          "title": "run"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-prepper",
+      "type": "object"
+    },
+    "rms": {
+      "description": "nplus Remote Management Server incl. RMS and Access Proxy",
+      "properties": {
+        "comps": {
+          "additionalProperties": false,
+          "description": "yaml-language-server: $schema=values.schema.json",
+          "properties": {
+            "cmis": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "CMIS Connector",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}cmis.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "cmis",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8096",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8196",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "Deployment",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "cmis",
+              "type": "object"
+            },
+            "ilm": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "SAP ILM Connector",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}ilm.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "ilm",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8297",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8397",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "Deployment",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "ilm",
+              "type": "object"
+            },
+            "mon": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Monitoring Console",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}mon.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "mon",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8387",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8388",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    },
+                    "tcp": {
+                      "default": "8389",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "tcp"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "StatefulSet",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "mon",
+              "type": "object"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "Values for the nappl component",
+              "properties": {
+                "displayName": {
+                  "default": "Application Layer",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "nappl",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8080",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8443",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "StatefulSet",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "nappl"
+            },
+            "nstl": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Storage Layer",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}nstl.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "nstl",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "tcp": {
+                      "default": "3005",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "3006",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "StatefulSet",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "nstl",
+              "type": "object"
+            },
+            "pipeliner": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Pipeliner",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}pipeliner.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "pipeliner",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "tcp": {
+                      "default": "4173",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "tcp"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "StatefulSet",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "pipeliner",
+              "type": "object"
+            },
+            "rs": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Rendition Server",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}rs.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "rs",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8192",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8193",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "Deployment",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "rs",
+              "type": "object"
+            },
+            "web": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Application Layer Web",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}web.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "web",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8090",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8453",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "Deployment",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "web",
+              "type": "object"
+            }
+          },
+          "title": "comps",
+          "type": "object"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "admin-server",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "git.nplus.cloud/subscription",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "1.2.1200",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "rms",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "medium": {
+                  "default": "",
+                  "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                  "title": "medium"
+                },
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-rms/log",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "100Mi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+          "title": "replicaCount"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "cni": {
+              "additionalProperties": false,
+              "properties": {
+                "adminIpRange": {
+                  "default": "",
+                  "description": "defines the IP Range of out-of-cluster Administrator Workplaces that are allowed to access the RMS Server.",
+                  "title": "adminIpRange"
+                }
+              },
+              "title": "cni",
+              "type": "object"
+            },
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-component-rms",
+      "type": "object"
+    },
+    "rmsa": {
+      "description": "nplus Remote Management Server incl. RMS and Access Proxy",
+      "properties": {
+        "comps": {
+          "additionalProperties": false,
+          "description": "yaml-language-server: $schema=values.schema.json",
+          "properties": {
+            "cmis": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "CMIS Connector",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}cmis.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "cmis",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8096",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8196",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "Deployment",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "cmis",
+              "type": "object"
+            },
+            "ilm": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "SAP ILM Connector",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}ilm.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "ilm",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8297",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8397",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "Deployment",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "ilm",
+              "type": "object"
+            },
+            "mon": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Monitoring Console",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}mon.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "mon",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8387",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8388",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    },
+                    "tcp": {
+                      "default": "8389",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "tcp"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "StatefulSet",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "mon",
+              "type": "object"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "Values for the nappl component",
+              "properties": {
+                "displayName": {
+                  "default": "Application Layer",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "nappl",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8080",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8443",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "StatefulSet",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "nappl"
+            },
+            "nstl": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Storage Layer",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}nstl.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "nstl",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "tcp": {
+                      "default": "3005",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "3006",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "StatefulSet",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "nstl",
+              "type": "object"
+            },
+            "pipeliner": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Pipeliner",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}pipeliner.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "pipeliner",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "tcp": {
+                      "default": "4173",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "tcp"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "StatefulSet",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "pipeliner",
+              "type": "object"
+            },
+            "rs": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Rendition Server",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}rs.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "rs",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8192",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8193",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "Deployment",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "rs",
+              "type": "object"
+            },
+            "web": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Application Layer Web",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}web.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "web",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8090",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8453",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "Deployment",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "web",
+              "type": "object"
+            }
+          },
+          "title": "comps",
+          "type": "object"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "admin-server",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "git.nplus.cloud/subscription",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "1.2.1200",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "rms",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "medium": {
+                  "default": "",
+                  "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                  "title": "medium"
+                },
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-rms/log",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "100Mi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+          "title": "replicaCount"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "cni": {
+              "additionalProperties": false,
+              "properties": {
+                "adminIpRange": {
+                  "default": "",
+                  "description": "defines the IP Range of out-of-cluster Administrator Workplaces that are allowed to access the RMS Server.",
+                  "title": "adminIpRange"
+                }
+              },
+              "title": "cni",
+              "type": "object"
+            },
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-component-rms",
+      "type": "object"
+    },
+    "rmsb": {
+      "description": "nplus Remote Management Server incl. RMS and Access Proxy",
+      "properties": {
+        "comps": {
+          "additionalProperties": false,
+          "description": "yaml-language-server: $schema=values.schema.json",
+          "properties": {
+            "cmis": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "CMIS Connector",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}cmis.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "cmis",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8096",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8196",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "Deployment",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "cmis",
+              "type": "object"
+            },
+            "ilm": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "SAP ILM Connector",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}ilm.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "ilm",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8297",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8397",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "Deployment",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "ilm",
+              "type": "object"
+            },
+            "mon": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Monitoring Console",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}mon.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "mon",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8387",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8388",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    },
+                    "tcp": {
+                      "default": "8389",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "tcp"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "StatefulSet",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "mon",
+              "type": "object"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "Values for the nappl component",
+              "properties": {
+                "displayName": {
+                  "default": "Application Layer",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "nappl",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8080",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8443",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "StatefulSet",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "nappl"
+            },
+            "nstl": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Storage Layer",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}nstl.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "nstl",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "tcp": {
+                      "default": "3005",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "3006",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "StatefulSet",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "nstl",
+              "type": "object"
+            },
+            "pipeliner": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Pipeliner",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}pipeliner.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "pipeliner",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "tcp": {
+                      "default": "4173",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "tcp"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "StatefulSet",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "pipeliner",
+              "type": "object"
+            },
+            "rs": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Rendition Server",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}rs.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "rs",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8192",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8193",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "Deployment",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "rs",
+              "type": "object"
+            },
+            "web": {
+              "additionalProperties": false,
+              "properties": {
+                "displayName": {
+                  "default": "Application Layer Web",
+                  "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                  "title": "displayName"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "Toggles if this component should be available through RMS",
+                  "title": "enabled"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}web.{{ .Release.Namespace }}.svc.cluster.local",
+                  "description": "The host, where this component runs",
+                  "title": "host"
+                },
+                "name": {
+                  "default": "web",
+                  "description": "The internal name of the component @internal -- do not change",
+                  "title": "name"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                  "properties": {
+                    "http": {
+                      "default": "8090",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8453",
+                      "description": "proxied port @internal -- do not change",
+                      "title": "https"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "replicaSetType": {
+                  "default": "Deployment",
+                  "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                  "title": "replicaSetType"
+                },
+                "restartReplicas": {
+                  "default": "1",
+                  "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                  "title": "restartReplicas"
+                }
+              },
+              "title": "web",
+              "type": "object"
+            }
+          },
+          "title": "comps",
+          "type": "object"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "admin-server",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "git.nplus.cloud/subscription",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "1.2.1200",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "rms",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "medium": {
+                  "default": "",
+                  "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                  "title": "medium"
+                },
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-rms/log",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "100Mi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+          "title": "replicaCount"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "cni": {
+              "additionalProperties": false,
+              "properties": {
+                "adminIpRange": {
+                  "default": "",
+                  "description": "defines the IP Range of out-of-cluster Administrator Workplaces that are allowed to access the RMS Server.",
+                  "title": "adminIpRange"
+                }
+              },
+              "title": "cni",
+              "type": "object"
+            },
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-component-rms",
+      "type": "object"
+    },
+    "rs": {
+      "description": "nscale Rendition Server, providing means to format-convert common file types",
+      "properties": {
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "rendition-server",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1301.2024121910",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8192",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8193",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "rendition-server",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "rs",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCount": {
+          "default": "",
+          "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+          "title": "minReplicaCount"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-rendition-server/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "10Gi",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "/usr/share/fonts/truetype/nplus",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-rendition-server/conf/license.xml",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-rendition-server/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "5Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "10Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "updateStrategy": {
+          "default": "",
+          "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+          "title": "updateStrategy"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-rs",
+      "type": "object"
+    },
+    "sharepoint": {
+      "description": "nscale SharePoint Connector, providing SP archiving to the Instance",
+      "properties": {
+        "clusterService": {
+          "additionalProperties": false,
+          "properties": {
+            "contextPath": {
+              "default": "",
+              "description": "set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances)",
+              "title": "contextPath"
+            },
+            "enabled": {
+              "default": false,
+              "title": "enabled",
+              "type": "boolean"
+            }
+          },
+          "title": "clusterService",
+          "type": "object"
+        },
+        "connector": {
+          "additionalProperties": false,
+          "properties": {
+            "cTagPropertyName": {
+              "default": "cTag",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "cTagPropertyName"
+            },
+            "eTagPropertyName": {
+              "default": "eTag",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "eTagPropertyName"
+            },
+            "idPropertyName": {
+              "default": "sharePointId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "idPropertyName"
+            },
+            "listItemIdPropertyName": {
+              "default": "SharePointListItemId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "listItemIdPropertyName"
+            },
+            "nscaleExpirationPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleExpirationPropertyName"
+            },
+            "nscaleGdprRelevantPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleGdprRelevantPropertyName"
+            },
+            "nscaleLegalHidePropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleLegalHidePropertyName"
+            },
+            "nscaleLegalHoldPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleLegalHoldPropertyName"
+            },
+            "nscaleRetentionPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleRetentionPropertyName"
+            },
+            "parentIdPropertyName": {
+              "default": "sharePointParentId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "parentIdPropertyName"
+            },
+            "sharePointChangeTokenPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointChangeTokenPropertyName"
+            },
+            "sharePointCreatedPropertyName": {
+              "default": "SharePointCreated",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointCreatedPropertyName"
+            },
+            "sharePointCreatorPropertyName": {
+              "default": "SharePointCreator",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointCreatorPropertyName"
+            },
+            "sharePointEditedPropertyName": {
+              "default": "SharePointLastModified",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointEditedPropertyName"
+            },
+            "sharePointEditorPropertyName": {
+              "default": "SharePointEditor",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointEditorPropertyName"
+            },
+            "stubIdPropertyName": {
+              "default": "SharePointStubId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "stubIdPropertyName"
+            },
+            "stubListItemIdPropertyName": {
+              "default": "SharePointStubListItemId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "stubListItemIdPropertyName"
+            },
+            "webUrlPropertyName": {
+              "default": "sharePointWebUrl",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "webUrlPropertyName"
+            }
+          },
+          "title": "connector",
+          "type": "object"
+        },
+        "doInitialCrawl": {
+          "default": "false",
+          "description": "toggle initial crawling. This value is mandatory.",
+          "title": "doInitialCrawl"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "sharepoint-connector",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.2.1400.2024073012",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/nscale_spc",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "management": {
+          "additionalProperties": false,
+          "properties": {
+            "port": {
+              "default": "18098",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "port"
+            },
+            "security": {
+              "default": "false",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "security"
+            },
+            "ssl": {
+              "default": "false",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "ssl"
+            }
+          },
+          "title": "management",
+          "type": "object"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8098",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8498",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "sharepoint-connector",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "sharepoint",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/sharepoint-connector/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/sharepoint-connector/bin/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "baseFolder": {
+              "default": "",
+              "description": "The base folder, this component should write to",
+              "title": "baseFolder"
+            },
+            "docArea": {
+              "default": "",
+              "description": "The document area, this component should write to",
+              "title": "docArea"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "parallelRequests": {
+          "default": "5",
+          "description": "amount of parallel requests",
+          "title": "parallelRequests"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "this is fix to 1 @ignore",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "sharepoint": {
+          "additionalProperties": false,
+          "properties": {
+            "clientCertPw": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "clientCertPw"
+            },
+            "clientId": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "clientId"
+            },
+            "doCheckOut": {
+              "default": "false",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "doCheckOut"
+            },
+            "secret": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "secret"
+            },
+            "serviceBusConnectionString": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusConnectionString"
+            },
+            "serviceBusQueueName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusQueueName"
+            },
+            "serviceBusRetentionConnectionString": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusRetentionConnectionString"
+            },
+            "serviceBusRetentionQueueName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusRetentionQueueName"
+            },
+            "serviceBusTopicNameConfigUpdate": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusTopicNameConfigUpdate"
+            },
+            "spHost": {
+              "default": "https://example.com",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "spHost"
+            },
+            "tenantId": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "tenantId"
+            },
+            "triggerProperty": {
+              "default": "toBeArchived",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "triggerProperty"
+            },
+            "webUserPw": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "webUserPw"
+            }
+          },
+          "title": "sharepoint",
+          "type": "object"
+        },
+        "ssl": {
+          "additionalProperties": false,
+          "properties": {
+            "keyAlias": {
+              "default": "https",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keyAlias"
+            },
+            "keyPassword": {
+              "default": "secret",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keyPassword"
+            },
+            "keystore": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystore"
+            },
+            "keystorePassword": {
+              "default": "secret",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystorePassword"
+            },
+            "keystoreSecret": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystoreSecret"
+            }
+          },
+          "title": "ssl",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-sharepoint",
+      "type": "object"
+    },
+    "sharepointa": {
+      "description": "nscale SharePoint Connector, providing SP archiving to the Instance",
+      "properties": {
+        "clusterService": {
+          "additionalProperties": false,
+          "properties": {
+            "contextPath": {
+              "default": "",
+              "description": "set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances)",
+              "title": "contextPath"
+            },
+            "enabled": {
+              "default": false,
+              "title": "enabled",
+              "type": "boolean"
+            }
+          },
+          "title": "clusterService",
+          "type": "object"
+        },
+        "connector": {
+          "additionalProperties": false,
+          "properties": {
+            "cTagPropertyName": {
+              "default": "cTag",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "cTagPropertyName"
+            },
+            "eTagPropertyName": {
+              "default": "eTag",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "eTagPropertyName"
+            },
+            "idPropertyName": {
+              "default": "sharePointId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "idPropertyName"
+            },
+            "listItemIdPropertyName": {
+              "default": "SharePointListItemId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "listItemIdPropertyName"
+            },
+            "nscaleExpirationPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleExpirationPropertyName"
+            },
+            "nscaleGdprRelevantPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleGdprRelevantPropertyName"
+            },
+            "nscaleLegalHidePropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleLegalHidePropertyName"
+            },
+            "nscaleLegalHoldPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleLegalHoldPropertyName"
+            },
+            "nscaleRetentionPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleRetentionPropertyName"
+            },
+            "parentIdPropertyName": {
+              "default": "sharePointParentId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "parentIdPropertyName"
+            },
+            "sharePointChangeTokenPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointChangeTokenPropertyName"
+            },
+            "sharePointCreatedPropertyName": {
+              "default": "SharePointCreated",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointCreatedPropertyName"
+            },
+            "sharePointCreatorPropertyName": {
+              "default": "SharePointCreator",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointCreatorPropertyName"
+            },
+            "sharePointEditedPropertyName": {
+              "default": "SharePointLastModified",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointEditedPropertyName"
+            },
+            "sharePointEditorPropertyName": {
+              "default": "SharePointEditor",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointEditorPropertyName"
+            },
+            "stubIdPropertyName": {
+              "default": "SharePointStubId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "stubIdPropertyName"
+            },
+            "stubListItemIdPropertyName": {
+              "default": "SharePointStubListItemId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "stubListItemIdPropertyName"
+            },
+            "webUrlPropertyName": {
+              "default": "sharePointWebUrl",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "webUrlPropertyName"
+            }
+          },
+          "title": "connector",
+          "type": "object"
+        },
+        "doInitialCrawl": {
+          "default": "false",
+          "description": "toggle initial crawling. This value is mandatory.",
+          "title": "doInitialCrawl"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "sharepoint-connector",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.2.1400.2024073012",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/nscale_spc",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "management": {
+          "additionalProperties": false,
+          "properties": {
+            "port": {
+              "default": "18098",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "port"
+            },
+            "security": {
+              "default": "false",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "security"
+            },
+            "ssl": {
+              "default": "false",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "ssl"
+            }
+          },
+          "title": "management",
+          "type": "object"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8098",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8498",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "sharepoint-connector",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "sharepoint",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/sharepoint-connector/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/sharepoint-connector/bin/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "baseFolder": {
+              "default": "",
+              "description": "The base folder, this component should write to",
+              "title": "baseFolder"
+            },
+            "docArea": {
+              "default": "",
+              "description": "The document area, this component should write to",
+              "title": "docArea"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "parallelRequests": {
+          "default": "5",
+          "description": "amount of parallel requests",
+          "title": "parallelRequests"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "this is fix to 1 @ignore",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "sharepoint": {
+          "additionalProperties": false,
+          "properties": {
+            "clientCertPw": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "clientCertPw"
+            },
+            "clientId": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "clientId"
+            },
+            "doCheckOut": {
+              "default": "false",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "doCheckOut"
+            },
+            "secret": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "secret"
+            },
+            "serviceBusConnectionString": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusConnectionString"
+            },
+            "serviceBusQueueName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusQueueName"
+            },
+            "serviceBusRetentionConnectionString": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusRetentionConnectionString"
+            },
+            "serviceBusRetentionQueueName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusRetentionQueueName"
+            },
+            "serviceBusTopicNameConfigUpdate": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusTopicNameConfigUpdate"
+            },
+            "spHost": {
+              "default": "https://example.com",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "spHost"
+            },
+            "tenantId": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "tenantId"
+            },
+            "triggerProperty": {
+              "default": "toBeArchived",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "triggerProperty"
+            },
+            "webUserPw": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "webUserPw"
+            }
+          },
+          "title": "sharepoint",
+          "type": "object"
+        },
+        "ssl": {
+          "additionalProperties": false,
+          "properties": {
+            "keyAlias": {
+              "default": "https",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keyAlias"
+            },
+            "keyPassword": {
+              "default": "secret",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keyPassword"
+            },
+            "keystore": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystore"
+            },
+            "keystorePassword": {
+              "default": "secret",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystorePassword"
+            },
+            "keystoreSecret": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystoreSecret"
+            }
+          },
+          "title": "ssl",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-sharepoint",
+      "type": "object"
+    },
+    "sharepointb": {
+      "description": "nscale SharePoint Connector, providing SP archiving to the Instance",
+      "properties": {
+        "clusterService": {
+          "additionalProperties": false,
+          "properties": {
+            "contextPath": {
+              "default": "",
+              "description": "set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances)",
+              "title": "contextPath"
+            },
+            "enabled": {
+              "default": false,
+              "title": "enabled",
+              "type": "boolean"
+            }
+          },
+          "title": "clusterService",
+          "type": "object"
+        },
+        "connector": {
+          "additionalProperties": false,
+          "properties": {
+            "cTagPropertyName": {
+              "default": "cTag",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "cTagPropertyName"
+            },
+            "eTagPropertyName": {
+              "default": "eTag",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "eTagPropertyName"
+            },
+            "idPropertyName": {
+              "default": "sharePointId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "idPropertyName"
+            },
+            "listItemIdPropertyName": {
+              "default": "SharePointListItemId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "listItemIdPropertyName"
+            },
+            "nscaleExpirationPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleExpirationPropertyName"
+            },
+            "nscaleGdprRelevantPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleGdprRelevantPropertyName"
+            },
+            "nscaleLegalHidePropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleLegalHidePropertyName"
+            },
+            "nscaleLegalHoldPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleLegalHoldPropertyName"
+            },
+            "nscaleRetentionPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleRetentionPropertyName"
+            },
+            "parentIdPropertyName": {
+              "default": "sharePointParentId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "parentIdPropertyName"
+            },
+            "sharePointChangeTokenPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointChangeTokenPropertyName"
+            },
+            "sharePointCreatedPropertyName": {
+              "default": "SharePointCreated",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointCreatedPropertyName"
+            },
+            "sharePointCreatorPropertyName": {
+              "default": "SharePointCreator",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointCreatorPropertyName"
+            },
+            "sharePointEditedPropertyName": {
+              "default": "SharePointLastModified",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointEditedPropertyName"
+            },
+            "sharePointEditorPropertyName": {
+              "default": "SharePointEditor",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointEditorPropertyName"
+            },
+            "stubIdPropertyName": {
+              "default": "SharePointStubId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "stubIdPropertyName"
+            },
+            "stubListItemIdPropertyName": {
+              "default": "SharePointStubListItemId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "stubListItemIdPropertyName"
+            },
+            "webUrlPropertyName": {
+              "default": "sharePointWebUrl",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "webUrlPropertyName"
+            }
+          },
+          "title": "connector",
+          "type": "object"
+        },
+        "doInitialCrawl": {
+          "default": "false",
+          "description": "toggle initial crawling. This value is mandatory.",
+          "title": "doInitialCrawl"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "sharepoint-connector",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.2.1400.2024073012",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/nscale_spc",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "management": {
+          "additionalProperties": false,
+          "properties": {
+            "port": {
+              "default": "18098",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "port"
+            },
+            "security": {
+              "default": "false",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "security"
+            },
+            "ssl": {
+              "default": "false",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "ssl"
+            }
+          },
+          "title": "management",
+          "type": "object"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8098",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8498",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "sharepoint-connector",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "sharepoint",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/sharepoint-connector/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/sharepoint-connector/bin/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "baseFolder": {
+              "default": "",
+              "description": "The base folder, this component should write to",
+              "title": "baseFolder"
+            },
+            "docArea": {
+              "default": "",
+              "description": "The document area, this component should write to",
+              "title": "docArea"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "parallelRequests": {
+          "default": "5",
+          "description": "amount of parallel requests",
+          "title": "parallelRequests"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "this is fix to 1 @ignore",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "sharepoint": {
+          "additionalProperties": false,
+          "properties": {
+            "clientCertPw": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "clientCertPw"
+            },
+            "clientId": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "clientId"
+            },
+            "doCheckOut": {
+              "default": "false",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "doCheckOut"
+            },
+            "secret": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "secret"
+            },
+            "serviceBusConnectionString": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusConnectionString"
+            },
+            "serviceBusQueueName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusQueueName"
+            },
+            "serviceBusRetentionConnectionString": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusRetentionConnectionString"
+            },
+            "serviceBusRetentionQueueName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusRetentionQueueName"
+            },
+            "serviceBusTopicNameConfigUpdate": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusTopicNameConfigUpdate"
+            },
+            "spHost": {
+              "default": "https://example.com",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "spHost"
+            },
+            "tenantId": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "tenantId"
+            },
+            "triggerProperty": {
+              "default": "toBeArchived",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "triggerProperty"
+            },
+            "webUserPw": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "webUserPw"
+            }
+          },
+          "title": "sharepoint",
+          "type": "object"
+        },
+        "ssl": {
+          "additionalProperties": false,
+          "properties": {
+            "keyAlias": {
+              "default": "https",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keyAlias"
+            },
+            "keyPassword": {
+              "default": "secret",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keyPassword"
+            },
+            "keystore": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystore"
+            },
+            "keystorePassword": {
+              "default": "secret",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystorePassword"
+            },
+            "keystoreSecret": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystoreSecret"
+            }
+          },
+          "title": "ssl",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-sharepoint",
+      "type": "object"
+    },
+    "sharepointc": {
+      "description": "nscale SharePoint Connector, providing SP archiving to the Instance",
+      "properties": {
+        "clusterService": {
+          "additionalProperties": false,
+          "properties": {
+            "contextPath": {
+              "default": "",
+              "description": "set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances)",
+              "title": "contextPath"
+            },
+            "enabled": {
+              "default": false,
+              "title": "enabled",
+              "type": "boolean"
+            }
+          },
+          "title": "clusterService",
+          "type": "object"
+        },
+        "connector": {
+          "additionalProperties": false,
+          "properties": {
+            "cTagPropertyName": {
+              "default": "cTag",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "cTagPropertyName"
+            },
+            "eTagPropertyName": {
+              "default": "eTag",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "eTagPropertyName"
+            },
+            "idPropertyName": {
+              "default": "sharePointId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "idPropertyName"
+            },
+            "listItemIdPropertyName": {
+              "default": "SharePointListItemId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "listItemIdPropertyName"
+            },
+            "nscaleExpirationPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleExpirationPropertyName"
+            },
+            "nscaleGdprRelevantPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleGdprRelevantPropertyName"
+            },
+            "nscaleLegalHidePropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleLegalHidePropertyName"
+            },
+            "nscaleLegalHoldPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleLegalHoldPropertyName"
+            },
+            "nscaleRetentionPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleRetentionPropertyName"
+            },
+            "parentIdPropertyName": {
+              "default": "sharePointParentId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "parentIdPropertyName"
+            },
+            "sharePointChangeTokenPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointChangeTokenPropertyName"
+            },
+            "sharePointCreatedPropertyName": {
+              "default": "SharePointCreated",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointCreatedPropertyName"
+            },
+            "sharePointCreatorPropertyName": {
+              "default": "SharePointCreator",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointCreatorPropertyName"
+            },
+            "sharePointEditedPropertyName": {
+              "default": "SharePointLastModified",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointEditedPropertyName"
+            },
+            "sharePointEditorPropertyName": {
+              "default": "SharePointEditor",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointEditorPropertyName"
+            },
+            "stubIdPropertyName": {
+              "default": "SharePointStubId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "stubIdPropertyName"
+            },
+            "stubListItemIdPropertyName": {
+              "default": "SharePointStubListItemId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "stubListItemIdPropertyName"
+            },
+            "webUrlPropertyName": {
+              "default": "sharePointWebUrl",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "webUrlPropertyName"
+            }
+          },
+          "title": "connector",
+          "type": "object"
+        },
+        "doInitialCrawl": {
+          "default": "false",
+          "description": "toggle initial crawling. This value is mandatory.",
+          "title": "doInitialCrawl"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "sharepoint-connector",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.2.1400.2024073012",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/nscale_spc",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "management": {
+          "additionalProperties": false,
+          "properties": {
+            "port": {
+              "default": "18098",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "port"
+            },
+            "security": {
+              "default": "false",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "security"
+            },
+            "ssl": {
+              "default": "false",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "ssl"
+            }
+          },
+          "title": "management",
+          "type": "object"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8098",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8498",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "sharepoint-connector",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "sharepoint",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/sharepoint-connector/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/sharepoint-connector/bin/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "baseFolder": {
+              "default": "",
+              "description": "The base folder, this component should write to",
+              "title": "baseFolder"
+            },
+            "docArea": {
+              "default": "",
+              "description": "The document area, this component should write to",
+              "title": "docArea"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "parallelRequests": {
+          "default": "5",
+          "description": "amount of parallel requests",
+          "title": "parallelRequests"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "this is fix to 1 @ignore",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "sharepoint": {
+          "additionalProperties": false,
+          "properties": {
+            "clientCertPw": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "clientCertPw"
+            },
+            "clientId": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "clientId"
+            },
+            "doCheckOut": {
+              "default": "false",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "doCheckOut"
+            },
+            "secret": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "secret"
+            },
+            "serviceBusConnectionString": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusConnectionString"
+            },
+            "serviceBusQueueName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusQueueName"
+            },
+            "serviceBusRetentionConnectionString": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusRetentionConnectionString"
+            },
+            "serviceBusRetentionQueueName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusRetentionQueueName"
+            },
+            "serviceBusTopicNameConfigUpdate": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusTopicNameConfigUpdate"
+            },
+            "spHost": {
+              "default": "https://example.com",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "spHost"
+            },
+            "tenantId": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "tenantId"
+            },
+            "triggerProperty": {
+              "default": "toBeArchived",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "triggerProperty"
+            },
+            "webUserPw": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "webUserPw"
+            }
+          },
+          "title": "sharepoint",
+          "type": "object"
+        },
+        "ssl": {
+          "additionalProperties": false,
+          "properties": {
+            "keyAlias": {
+              "default": "https",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keyAlias"
+            },
+            "keyPassword": {
+              "default": "secret",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keyPassword"
+            },
+            "keystore": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystore"
+            },
+            "keystorePassword": {
+              "default": "secret",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystorePassword"
+            },
+            "keystoreSecret": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystoreSecret"
+            }
+          },
+          "title": "ssl",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-sharepoint",
+      "type": "object"
+    },
+    "sharepointd": {
+      "description": "nscale SharePoint Connector, providing SP archiving to the Instance",
+      "properties": {
+        "clusterService": {
+          "additionalProperties": false,
+          "properties": {
+            "contextPath": {
+              "default": "",
+              "description": "set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances)",
+              "title": "contextPath"
+            },
+            "enabled": {
+              "default": false,
+              "title": "enabled",
+              "type": "boolean"
+            }
+          },
+          "title": "clusterService",
+          "type": "object"
+        },
+        "connector": {
+          "additionalProperties": false,
+          "properties": {
+            "cTagPropertyName": {
+              "default": "cTag",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "cTagPropertyName"
+            },
+            "eTagPropertyName": {
+              "default": "eTag",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "eTagPropertyName"
+            },
+            "idPropertyName": {
+              "default": "sharePointId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "idPropertyName"
+            },
+            "listItemIdPropertyName": {
+              "default": "SharePointListItemId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "listItemIdPropertyName"
+            },
+            "nscaleExpirationPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleExpirationPropertyName"
+            },
+            "nscaleGdprRelevantPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleGdprRelevantPropertyName"
+            },
+            "nscaleLegalHidePropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleLegalHidePropertyName"
+            },
+            "nscaleLegalHoldPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleLegalHoldPropertyName"
+            },
+            "nscaleRetentionPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "nscaleRetentionPropertyName"
+            },
+            "parentIdPropertyName": {
+              "default": "sharePointParentId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "parentIdPropertyName"
+            },
+            "sharePointChangeTokenPropertyName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointChangeTokenPropertyName"
+            },
+            "sharePointCreatedPropertyName": {
+              "default": "SharePointCreated",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointCreatedPropertyName"
+            },
+            "sharePointCreatorPropertyName": {
+              "default": "SharePointCreator",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointCreatorPropertyName"
+            },
+            "sharePointEditedPropertyName": {
+              "default": "SharePointLastModified",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointEditedPropertyName"
+            },
+            "sharePointEditorPropertyName": {
+              "default": "SharePointEditor",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "sharePointEditorPropertyName"
+            },
+            "stubIdPropertyName": {
+              "default": "SharePointStubId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "stubIdPropertyName"
+            },
+            "stubListItemIdPropertyName": {
+              "default": "SharePointStubListItemId",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "stubListItemIdPropertyName"
+            },
+            "webUrlPropertyName": {
+              "default": "sharePointWebUrl",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "webUrlPropertyName"
+            }
+          },
+          "title": "connector",
+          "type": "object"
+        },
+        "doInitialCrawl": {
+          "default": "false",
+          "description": "toggle initial crawling. This value is mandatory.",
+          "title": "doInitialCrawl"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "sharepoint-connector",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.2.1400.2024073012",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/nscale_spc",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "management": {
+          "additionalProperties": false,
+          "properties": {
+            "port": {
+              "default": "18098",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "port"
+            },
+            "security": {
+              "default": "false",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "security"
+            },
+            "ssl": {
+              "default": "false",
+              "description": "see mail from Manuel, 30.7.2024",
+              "title": "ssl"
+            }
+          },
+          "title": "management",
+          "type": "object"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8098",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8498",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "sharepoint-connector",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "sharepoint",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/sharepoint-connector/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/sharepoint-connector/bin/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "baseFolder": {
+              "default": "",
+              "description": "The base folder, this component should write to",
+              "title": "baseFolder"
+            },
+            "docArea": {
+              "default": "",
+              "description": "The document area, this component should write to",
+              "title": "docArea"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "parallelRequests": {
+          "default": "5",
+          "description": "amount of parallel requests",
+          "title": "parallelRequests"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "this is fix to 1 @ignore",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "sharepoint": {
+          "additionalProperties": false,
+          "properties": {
+            "clientCertPw": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "clientCertPw"
+            },
+            "clientId": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "clientId"
+            },
+            "doCheckOut": {
+              "default": "false",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "doCheckOut"
+            },
+            "secret": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "secret"
+            },
+            "serviceBusConnectionString": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusConnectionString"
+            },
+            "serviceBusQueueName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusQueueName"
+            },
+            "serviceBusRetentionConnectionString": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusRetentionConnectionString"
+            },
+            "serviceBusRetentionQueueName": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusRetentionQueueName"
+            },
+            "serviceBusTopicNameConfigUpdate": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "serviceBusTopicNameConfigUpdate"
+            },
+            "spHost": {
+              "default": "https://example.com",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "spHost"
+            },
+            "tenantId": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "tenantId"
+            },
+            "triggerProperty": {
+              "default": "toBeArchived",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "triggerProperty"
+            },
+            "webUserPw": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "webUserPw"
+            }
+          },
+          "title": "sharepoint",
+          "type": "object"
+        },
+        "ssl": {
+          "additionalProperties": false,
+          "properties": {
+            "keyAlias": {
+              "default": "https",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keyAlias"
+            },
+            "keyPassword": {
+              "default": "secret",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keyPassword"
+            },
+            "keystore": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystore"
+            },
+            "keystorePassword": {
+              "default": "secret",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystorePassword"
+            },
+            "keystoreSecret": {
+              "default": "",
+              "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+              "title": "keystoreSecret"
+            }
+          },
+          "title": "ssl",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-sharepoint",
+      "type": "object"
+    },
+    "toolbox": {
+      "description": "Installs the environment toolbox with git and nstore downloader installed, also serving as target for pool copy actions in the pipeline",
+      "properties": {
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "toolbox2",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "cr.nplus.cloud/subscription",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "1.2.1300",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "envtoolbox",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "nstoreDownloader": {
+          "additionalProperties": false,
+          "description": "yaml-language-server: $schema=values.schema.json",
+          "properties": {
+            "enabled": {
+              "default": "false",
+              "description": "enables the nstore downloader",
+              "title": "enabled"
+            },
+            "nstore": {
+              "default": "`https://nstore.ceyoniq.com...`",
+              "description": "set the nstore URL",
+              "title": "nstore"
+            },
+            "target": {
+              "default": "pool/nstore",
+              "description": "target directory in the conf pv",
+              "title": "target"
+            }
+          },
+          "title": "nstoreDownloader",
+          "type": "object"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "1",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "512Mi",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "1m",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "64Mi",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        }
+      },
+      "title": "nplus-environment-toolbox",
+      "type": "object"
+    },
+    "web": {
+      "description": "nscale Web, providing a modern Web UI to nscale users",
+      "properties": {
+        "authType": {
+          "default": "",
+          "description": "Set the authentication type login, basic, negotiate, implicit ntlmv2, kerberos",
+          "title": "authType"
+        },
+        "customizingMode": {
+          "default": "",
+          "description": "If this setting is enabled, layouts will update immediately when changes are made. It is no longer necessary to re-register or restart the service. If this setting is not activated, the automatic update of the metamodel is turned off. We recommend not using this setting in productive systems because it reduces system performance.",
+          "title": "customizingMode"
+        },
+        "disableUsernamePassword": {
+          "default": "",
+          "description": "surpresses the login dialog",
+          "title": "disableUsernamePassword"
+        },
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "application-layer-web",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1300.2024121620",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "immediateFederatedLogin": {
+          "default": "",
+          "description": "directly log in via identity providers",
+          "title": "immediateFederatedLogin"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/nscale_web",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "XtConLoadBalancerSession",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8090",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8453",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "web-client",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "web",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "metamodelMode": {
+          "default": "",
+          "description": "Refreshes the metamodel mode",
+          "title": "metamodelMode"
+        },
+        "minReplicaCount": {
+          "default": "",
+          "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+          "title": "minReplicaCount"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/application-layer-web/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "defaultConfig": {
+              "default": "{{ .component.fullName }}-defaultconfig",
+              "description": "Sets a configMap with default configuration files that get copied to a new and empty container just before the template folder gets copied. Existing files are not overwritten.",
+              "title": "defaultConfig"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "medium": {
+                  "default": "",
+                  "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                  "title": "medium"
+                },
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-server/application-layer-web/apache/logs/",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "5Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "oauthDomains": {
+          "default": "",
+          "description": "OAuth nscale domains",
+          "title": "oauthDomains"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "sameSite": {
+          "default": "",
+          "description": "nscale SameSite Cookie Header",
+          "title": "sameSite"
+        },
+        "samlDomains": {
+          "default": "",
+          "description": "SAML nscale domains",
+          "title": "samlDomains"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "smartCrossgrade": {
+          "default": "",
+          "description": "Enable Crossgrade for Smart Layouts",
+          "title": "smartCrossgrade"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "updateStrategy": {
+          "default": "",
+          "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+          "title": "updateStrategy"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-web",
+      "type": "object"
+    },
+    "webdav": {
+      "description": "nscale WebDAV Connector, providing a standard WebDAV interface to the Instance",
+      "properties": {
+        "env": {
+          "default": "",
+          "description": "Sets additional environment variables for the configuration.",
+          "title": "env"
+        },
+        "envMap": {
+          "default": "",
+          "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+          "title": "envMap"
+        },
+        "envSecret": {
+          "default": "",
+          "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+          "title": "envSecret"
+        },
+        "fullnameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal fullname function",
+          "title": "fullnameOverride"
+        },
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "provide the image to be used for this component",
+          "properties": {
+            "name": {
+              "default": "webdav-connector",
+              "description": "the name of the image to use",
+              "title": "name"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "title": "pullPolicy",
+              "type": "string"
+            },
+            "pullSecrets": {
+              "description": "you can provide your own pullSecrets, in case you use a private repo.",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "pullSecrets"
+            },
+            "repo": {
+              "default": "ceyoniq.azurecr.io/release/nscale",
+              "description": "if you use a private repo, feel free to set it here",
+              "title": "repo"
+            },
+            "tag": {
+              "default": "ubi.9.3.1000.2024091609",
+              "description": "the tag of the image to use",
+              "title": "tag"
+            }
+          },
+          "title": "image"
+        },
+        "ingress": {
+          "additionalProperties": false,
+          "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "Adds extra Annotations to the ingress",
+              "title": "annotations"
+            },
+            "backendProtocol": {
+              "default": "`http` <br> `https` in zero trust mode",
+              "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+              "title": "backendProtocol"
+            },
+            "class": {
+              "default": "`public`",
+              "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+              "title": "class"
+            },
+            "contextPath": {
+              "default": "/dav",
+              "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+              "title": "contextPath"
+            },
+            "cookie": {
+              "default": "",
+              "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+              "title": "cookie"
+            },
+            "deny": {
+              "default": "",
+              "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+              "title": "deny"
+            },
+            "domain": {
+              "default": "",
+              "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+              "title": "domain"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+              "title": "enabled"
+            },
+            "inputPath": {
+              "default": "",
+              "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+              "title": "inputPath"
+            },
+            "namespace": {
+              "default": "\"ingress, kube-system, ingress-nginx\"",
+              "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+              "title": "namespace"
+            },
+            "proxyReadTimeout": {
+              "default": "",
+              "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+              "title": "proxyReadTimeout"
+            },
+            "rewriteTarget": {
+              "default": "",
+              "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+              "title": "rewriteTarget"
+            },
+            "secret": {
+              "default": "`{{ .this.ingress.domain }}-tls`",
+              "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+              "title": "secret"
+            },
+            "whitelist": {
+              "default": "",
+              "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+              "title": "whitelist"
+            }
+          },
+          "title": "ingress"
+        },
+        "javaOpts": {
+          "additionalProperties": false,
+          "description": "Options for the Java VM",
+          "properties": {
+            "javaMaxMem": {
+              "default": "",
+              "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+              "title": "javaMaxMem"
+            },
+            "javaMaxRamPercentage": {
+              "default": "",
+              "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+              "title": "javaMaxRamPercentage"
+            },
+            "javaMinMem": {
+              "default": "",
+              "description": "set the minimum memory, java will consume",
+              "title": "javaMinMem"
+            },
+            "javaMisc": {
+              "default": "",
+              "description": "Any misc Java Options that need to be passed to the container",
+              "title": "javaMisc"
+            }
+          },
+          "title": "javaOpts"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "description": "defines internal constants for nplus. do not change these values",
+          "properties": {
+            "componentVersion": {
+              "default": "",
+              "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+              "title": "componentVersion"
+            },
+            "language": {
+              "default": "java",
+              "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+              "title": "language"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+              "properties": {
+                "http": {
+                  "default": "8088",
+                  "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8488",
+                  "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "https"
+                },
+                "rmi": {
+                  "default": "",
+                  "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "rmi"
+                },
+                "tcp": {
+                  "default": "",
+                  "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "",
+                  "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "serviceContainer": {
+              "default": "webdav-connector",
+              "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+              "title": "serviceContainer"
+            },
+            "stage": {
+              "default": "",
+              "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+              "title": "stage"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            },
+            "type": {
+              "default": "webdav",
+              "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+              "title": "type"
+            },
+            "wave": {
+              "default": "",
+              "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+              "title": "wave"
+            }
+          },
+          "title": "meta"
+        },
+        "minReplicaCount": {
+          "default": "",
+          "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+          "title": "minReplicaCount"
+        },
+        "minReplicaCountType": {
+          "default": "",
+          "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+          "title": "minReplicaCountType"
+        },
+        "mounts": {
+          "additionalProperties": false,
+          "properties": {
+            "caCerts": {
+              "additionalProperties": false,
+              "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "caCerts"
+            },
+            "componentCerts": {
+              "additionalProperties": false,
+              "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+              "properties": {
+                "configMap": {
+                  "default": "",
+                  "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                  "title": "configMap"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets the path to the component certs. @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                  "title": "secret"
+                }
+              },
+              "title": "componentCerts"
+            },
+            "conf": {
+              "additionalProperties": false,
+              "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-webdav/conf",
+                  "description": "Sets the path to the conf files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "conf"
+            },
+            "data": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the data disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the data files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the data disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "data",
+              "type": "object"
+            },
+            "disk": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the disk",
+                  "title": "class"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                  "title": "enabled"
+                },
+                "migration": {
+                  "default": "false",
+                  "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                  "title": "migration"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the disk files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "disk",
+              "type": "object"
+            },
+            "file": {
+              "additionalProperties": false,
+              "properties": {
+                "class": {
+                  "default": "",
+                  "description": "Sets the class of the shared disk",
+                  "title": "class"
+                },
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the shared files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "",
+                  "description": "Sets the size of the shared disk",
+                  "title": "size"
+                },
+                "volumeName": {
+                  "default": "",
+                  "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                  "title": "volumeName"
+                }
+              },
+              "title": "file",
+              "type": "object"
+            },
+            "fonts": {
+              "additionalProperties": false,
+              "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "fonts"
+            },
+            "generic": {
+              "default": "",
+              "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+              "title": "generic"
+            },
+            "license": {
+              "additionalProperties": false,
+              "description": "some nscale Components require a license file and this defines it's location",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the license files @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "license"
+            },
+            "logs": {
+              "additionalProperties": false,
+              "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+              "properties": {
+                "path": {
+                  "default": "/opt/ceyoniq/nscale-webdav/logs",
+                  "description": "Sets the path to the log files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the log disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "logs"
+            },
+            "pool": {
+              "additionalProperties": false,
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                  "title": "path"
+                }
+              },
+              "title": "pool",
+              "type": "object"
+            },
+            "ptemp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "default": "",
+                  "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                  "title": "paths"
+                }
+              },
+              "title": "ptemp"
+            },
+            "temp": {
+              "additionalProperties": false,
+              "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+              "properties": {
+                "path": {
+                  "default": "",
+                  "description": "Sets the path to the temporary files @internal -- do not change this value",
+                  "title": "path"
+                },
+                "paths": {
+                  "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "paths"
+                },
+                "size": {
+                  "default": "1Gi",
+                  "description": "Sets the size of the temporary disk (all paths)",
+                  "title": "size"
+                }
+              },
+              "title": "temp"
+            }
+          },
+          "title": "mounts",
+          "type": "object"
+        },
+        "nameOverride": {
+          "default": "",
+          "description": "This overrides the output of the internal name function",
+          "title": "nameOverride"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "The nscale Application Layer, this component should talk to",
+          "properties": {
+            "account": {
+              "default": "",
+              "description": "The technical account to login with",
+              "title": "account"
+            },
+            "domain": {
+              "default": "",
+              "description": "The domain of the technical account",
+              "title": "domain"
+            },
+            "host": {
+              "default": "",
+              "description": "nappl host name",
+              "title": "host"
+            },
+            "instance": {
+              "default": "",
+              "description": "instance of the Application Layer, likely `instance1`",
+              "title": "instance"
+            },
+            "password": {
+              "default": "",
+              "description": "The password of the technical accunt (if not set by secret)",
+              "title": "password"
+            },
+            "port": {
+              "default": "",
+              "description": "nappl port (http 8080 or https 8443)",
+              "title": "port"
+            },
+            "secret": {
+              "default": "",
+              "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+              "title": "secret"
+            },
+            "ssl": {
+              "default": "",
+              "description": "sets the Advanced Connect to tls",
+              "title": "ssl"
+            }
+          },
+          "title": "nappl"
+        },
+        "nodeSelector": {
+          "default": "",
+          "description": "select specific nodes for this component",
+          "title": "nodeSelector"
+        },
+        "replicaCount": {
+          "default": "1",
+          "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+          "title": "replicaCount"
+        },
+        "resources": {
+          "additionalProperties": false,
+          "description": "Assigns hardware resources to container",
+          "properties": {
+            "limits": {
+              "additionalProperties": false,
+              "description": "Limits the maximum resources",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "The maximum allowed CPU for the container",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "The maximum allowed RAM for the container",
+                  "title": "memory"
+                }
+              },
+              "title": "limits"
+            },
+            "requests": {
+              "additionalProperties": false,
+              "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+              "properties": {
+                "cpu": {
+                  "default": "",
+                  "description": "Set the share of guaranteed CPU to the container.",
+                  "title": "cpu"
+                },
+                "memory": {
+                  "default": "",
+                  "description": "Set the share of guaranteed RAM to the container",
+                  "title": "memory"
+                }
+              },
+              "title": "requests"
+            }
+          },
+          "title": "resources"
+        },
+        "security": {
+          "additionalProperties": false,
+          "description": "Security Section defining default runtime environment for your container",
+          "properties": {
+            "containerSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "allowPrivilegeEscalation": {
+                  "default": "false",
+                  "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                  "title": "allowPrivilegeEscalation"
+                },
+                "capabilities": {
+                  "additionalProperties": false,
+                  "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                  "properties": {
+                    "drop": {
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "drop",
+                      "type": "array"
+                    }
+                  },
+                  "title": "capabilities"
+                },
+                "readOnlyRootFilesystem": {
+                  "default": "true",
+                  "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                  "title": "readOnlyRootFilesystem"
+                }
+              },
+              "title": "containerSecurityContext",
+              "type": "object"
+            },
+            "podSecurityContext": {
+              "additionalProperties": false,
+              "properties": {
+                "fsGroup": {
+                  "default": "1001",
+                  "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                  "title": "fsGroup"
+                },
+                "fsGroupChangePolicy": {
+                  "default": "OnRootMismatch",
+                  "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                  "title": "fsGroupChangePolicy"
+                },
+                "runAsUser": {
+                  "default": "1001",
+                  "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                  "title": "runAsUser"
+                }
+              },
+              "title": "podSecurityContext",
+              "type": "object"
+            },
+            "zeroTrust": {
+              "default": "`false`",
+              "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+              "title": "zeroTrust"
+            }
+          },
+          "title": "security"
+        },
+        "service": {
+          "additionalProperties": false,
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "adds extra Annotations to the service",
+              "title": "annotations"
+            },
+            "enabled": {
+              "default": "true",
+              "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+              "title": "enabled"
+            },
+            "selector": {
+              "default": "component",
+              "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+              "title": "selector"
+            }
+          },
+          "title": "service",
+          "type": "object"
+        },
+        "telemetry": {
+          "additionalProperties": false,
+          "description": "Settings for telemetry tools",
+          "properties": {
+            "openTelemetry": {
+              "default": "",
+              "description": "turns Open Telemetry on",
+              "title": "openTelemetry"
+            },
+            "serviceName": {
+              "default": "",
+              "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+              "title": "serviceName"
+            }
+          },
+          "title": "telemetry"
+        },
+        "template": {
+          "additionalProperties": false,
+          "description": "provide extra settings for pod templates",
+          "properties": {
+            "annotations": {
+              "default": "",
+              "description": "set additional annotations for pods",
+              "title": "annotations"
+            },
+            "labels": {
+              "default": "",
+              "description": "set additional labels for pods",
+              "title": "labels"
+            }
+          },
+          "title": "template"
+        },
+        "terminationGracePeriodSeconds": {
+          "default": "",
+          "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+          "title": "terminationGracePeriodSeconds"
+        },
+        "timezone": {
+          "default": "`Europe/Berlin`",
+          "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+          "title": "timezone"
+        },
+        "tolerations": {
+          "default": "",
+          "description": "Set tolerations for this component",
+          "title": "tolerations"
+        },
+        "updateStrategy": {
+          "default": "",
+          "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+          "title": "updateStrategy"
+        },
+        "utils": {
+          "additionalProperties": false,
+          "properties": {
+            "debug": {
+              "default": "`false`",
+              "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+              "title": "debug"
+            },
+            "disableWait": {
+              "default": "`false`",
+              "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+              "title": "disableWait"
+            },
+            "disableWave": {
+              "default": "`false`",
+              "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+              "title": "disableWave"
+            },
+            "includeNamespace": {
+              "default": "`true`",
+              "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+              "title": "includeNamespace"
+            },
+            "maintenance": {
+              "default": "`false`",
+              "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+              "title": "maintenance"
+            },
+            "renderComments": {
+              "default": "`true`",
+              "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+              "title": "renderComments"
+            }
+          },
+          "title": "utils",
+          "type": "object"
+        },
+        "waitFor": {
+          "default": "",
+          "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+          "title": "waitFor"
+        }
+      },
+      "title": "nplus-component-webdav",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/instance/values.yaml b/charts/instance/values.yaml
new file mode 100644
index 0000000..b54d18d
--- /dev/null
+++ b/charts/instance/values.yaml
@@ -0,0 +1,878 @@
+# yaml-language-server: $schema=values.schema.json
+components:
+  # --  enable a consumer *nscale Application Layer* component in this instance
+  nappl: true
+  # --  enable a dedicated jobs *nscale Application Layer* component in this instance
+  # please also make sure to set the *jobs* setting
+  nappljobs: false
+  # --  enable a *nscale Web* component in this instance
+  web: true
+  # --  enable a *nscale Monitoring Console* component in this instance
+  mon: false
+  # --  enable a *nscale Rendition Server* component in this instance
+  rs: true
+  # --  enable a *nscale ILM Connector* component in this instance
+  ilm: false
+  # --  enable a *nscale ERP Proxy Connector* component in this instance
+  erpproxy: false
+  # --  enable a *nscale ERP CMIS Connector* component in this instance
+  erpcmis: false
+  # --  enable a *nscale CMIS Connector* component in this instance
+  cmis: false
+  # --  enable an internal *Postgres Database* in this instance
+  database: true
+  # --  enable a *nscale Server Storage Layer* component in this instance
+  # If you are in a **High Availability** scenario, disable this
+  nstl: true
+  # --  enable an additional *nscale Server Storage Layer* node in this instance
+  # within a **High Availability** scenario.
+  nstla: false
+  # --  enable an additional *nscale Server Storage Layer* node in this instance
+  # within a **High Availability** scenario.
+  nstlb: false
+  # --  enable an additional *nscale Server Storage Layer* node in this instance
+  # within a **High Availability** scenario.
+  nstlc: false
+  # --  enable an additional *nscale Server Storage Layer* node in this instance
+  # within a **High Availability** scenario.
+  nstld: false
+  # --  enable *nscale Pipeliner* component in this instance
+  pipeliner: false
+  # --  deploy any solution using GBA, Standard Apps or shell copy with this generic deployment
+  # chart
+  application: false
+  # --  download, deploy and run any git asset or script prior to installation of the components
+  prepper: false
+  # --  enable a *nscale WebDAV Connector* component in this instance
+  webdav: false
+  # --  enable a *nscale Administrator Web* component in this instance
+  administrator: false
+  # --  enable a *nplus Remote Management Server* component in this instance
+  # If you are in a **High Availability** scenario, disable this
+  rms: false
+  # --  enable an additional *nplus Remote Management Server* in this instance
+  # within a **High Availability** scenario.
+  rmsa: false
+  # --  enable an additional *nplus Remote Management Server* in this instance
+  # within a **High Availability** scenario.
+  rmsb: false
+  # --  enable a *nscale Process Automation Modeler* component in this instance
+  pam: false
+  # --  enable a *nscale Sharepoint Connector* component in this instance
+  sharepoint: false
+  # --  enable an additional *nscale Sharepoint Connector* component in this instance for
+  # another set of configuration parameters
+  sharepointa: false
+  # --  enable an additional *nscale Sharepoint Connector* component in this instance for
+  # another set of configuration parameters
+  sharepointb: false
+  # --  enable an additional *nscale Sharepoint Connector* component in this instance for
+  # another set of configuration parameters
+  sharepointc: false
+  # --  enable an additional *nscale Sharepoint Connector* component in this instance for
+  # another set of configuration parameters
+  sharepointd: false
+  # -- This section is for the single-instance-mode in which all environement components are integrated
+  # into the instance
+  sim:
+    # -- This is for *Single-Instance-Mode* **only**. Read the docu before enabling this.
+    # DAV gives you WebDAV access to your conf and ptemp volumes
+    dav: false
+    # -- This is for *Single-Instance-Mode* **only**. Read the docu before enabling this.
+    # the backend components holds the common storages / PVCs for conf and ptemp
+    # umong other common environmental resources
+    backend: false
+    # -- This is for *Single-Instance-Mode* **only**. Read the docu before enabling this.
+    # The Operator will let you query the Custom Resources for nscale, e.g.
+    # `kubectl get nscale`
+    operator: false
+    # -- This is for *Single-Instance-Mode* **only**. Read the docu before enabling this.
+    # the toolbox has a git client installed and is suitable for pulling, pushing, copying 
+    # stuff into the pool, fonts, certificates, snippets and configuration files
+    toolbox: false
+  #TODO: remove
+  dmsapi: false
+meta:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+global:
+  telemetry:
+    # -- if you use a OpenTelemetry as a telemetry collector, you can enable it here.
+    # This will add the annotations to some known pods for the injector to use
+    # agents inside the pods for telemetry collection. 
+    # This often goes along with the `language` setting in the meta section to tell the 
+    # telemetry collector which agent to inject.
+    openTelemetry:
+  security:
+    # -- enables zero trust on the instance.
+    # When enabled, no unencrypted http connection is allowed.
+    # This will remove all http ports from pods, services, network policies and ingress rules
+    zeroTrust:
+    cni:
+      # -- if defined, creates a default NetworkPolicy to handle 
+      # ingress Traffic to the instance.
+      # Possible Values: deny, allow, none
+      defaultIngressPolicy:
+      # -- if defined, creates a default NetworkPolicy to handle 
+      # egress Traffic from the instance.
+      # Possible Values: deny, allow, none
+      defaultEgressPolicy:
+      # -- creates NetworkPolicies for each 
+      # component.
+      createNetworkPolicy:
+      # -- sets the namespace, from which Administration is
+      # allowed
+      administratorNamespace: "{{ .Release.Namespace }}"
+      # -- sets the instance, from which Administration is
+      # allowed
+      administratorInstance: "{{ .this.instance.name }}"
+      # -- sets the namespace, from which Monitoring is
+      # allowed
+      monitoringNamespace: "{{ .Release.Namespace }}"
+      # -- sets the instance, from which Monitoring is
+      # allowed
+      monitoringInstance: "{{ .this.instance.name }}"
+      # -- sets the namespace, from which Process Automation Modeling is
+      # allowed
+      pamNamespace: "{{ .Release.Namespace }}"
+      # -- sets the instance, from which Process Automation Modeling is
+      # allowed
+      pamInstance: "{{ .this.instance.name }}"
+  instance:
+    # -- The name of the instance. Should this name be identical to the namespace name, then 
+    # the prefix will be dropped.
+    # By default, this is the .Release.Name
+    name: "{{ .Release.Name }}"
+    # -- The group of the instance. This is used for the networkPolicies. Only Pods within one group are allowed to communicate
+    # if you enable the nplus Network Policies.
+    # By default, this is set the same as the instance name
+    group:
+  ingress:
+    # -- Sets the global domain within the instance to be used, if the component does not define any domain.
+    # If this remains empty, no ingress is generated
+    # Example: `{{ .instance.group }}.lab.nplus.cloud`
+    domain:
+    # -- Sets the root for this instance, where incoming root traffic should be redirected to
+    appRoot: /nscale_web
+    # -- Sets the name of the tls secret to be used for this ingress, that contains
+    # the private and public key. This secret is then either
+    # generated by cert-manager or self signed by helm - or not created
+    # @default -- `{{ .this.ingress.domain }}-tls`
+    secret:
+    # -- sets the global ingressclass for all components to use - if they do not define a specific
+    # one, for example if there are separate controllers for internal and external traffic
+    # @default -- `public``
+    class:
+    # --  optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+    # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+    # ingress controllers
+    whitelist:
+    # -- Sets the name of the issuer to create the tls secret. Very common is to have it created by 
+    # cert-manager. Please see the documentation how to create a cert-manager cluster issuer for example.
+    # If no issuer is set, no certificate request will be generated
+    issuer:
+    # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+    # to allow traffic from this namespace to our pods. This may be a comma separated list
+    # @default -- `ingress, kube-system, ingress-nginx`
+    namespace:
+    # --  if you do not define an issuer to generate the tls secret for you, you still can have a self signed certificate
+    # generated for you, if you set this to true. The default is true, so either you have an issuer or not, you will always
+    # end up with a certificate. Set an empty issuer and createSelfSignedCertificate to false to have no certificate generated
+    # and use an external or existing secret. Then make sure the secret matches.
+    createSelfSignedCertificate: true
+  # -- Globally set the license secret name
+  license: nscale-license
+  waitImage:
+    # -- defines the nplus toolbox image to be used for the *wait* feature
+    repo: cr.nplus.cloud/subscription
+    # -- defines the nplus toolbox name to be used for the *wait* feature
+    name: toolbox2
+    # -- defines the nplus toolbox tag to be used for the *wait* feature
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: 1.2.1300
+    # -- defines the nplus toolbox pull policy to be used for the *wait* feature
+    pullPolicy: IfNotPresent
+  logForwarderImage:
+    # -- defines the nplus toolbox image to be used for the *wait* feature
+    repo: cr.fluentbit.io/fluent
+    # -- defines the nplus toolbox name to be used for the *wait* feature
+    name: fluent-bit
+    # -- defines the tag for the logforwarder (FluentBit)
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: "2.0"
+    # -- defines the nplus toolbox pull policy to be used for the *wait* feature
+    pullPolicy: IfNotPresent
+  nappl:
+    # -- sets the *nscale Server Application Layer* host to be used. As this is a global option,
+    # it can be overridden at component level.
+    host: "{{ .component.prefix }}nappl.{{ .Release.Namespace }}"
+    # -- sets the *nscale Server Application Layer* port to be used. As this is a global option,
+    # it can be overridden at component level.
+    # if you switch to zero trus mode or change the nappl backend to https, you want to modify this
+    # port to 8443
+    port: 8080
+    # -- wether to use ssl or not for the advanced connector
+    ssl: false
+    # -- the instance of *nscale Server Application Layer* to be used
+    # @internal -- As this is depricated for nscale 10, you should never modify this.
+    instance: "nscalealinst1"
+    # -- The technical account to login with
+    account: admin
+    # -- The domain of the technical account
+    domain: nscale
+    # -- The password of the technical accunt (if not set by secret)
+    password: admin
+    # -- An optional secret that holds the credentials (the keys must be `account` and `password`)
+    secret:
+  database:
+    # -- name of the nscale DB
+    name: "nscale"
+    # --  nscale DB server dialect
+    dialect: "PostgreSQL"
+    # --  nscale DB server driverclass
+    driverclass: "org.postgresql.Driver"
+    # -- The URL to the database
+    url: "jdbc:postgresql://{{ .component.prefix }}database:5432/{{ .this.database.name }}"
+    # -- DB schema name
+    schema: "public"
+    # -- DB account (if not using a secret)
+    account: "nscale"
+    # -- DB password (if not using a secret)
+    password: "nscale"
+    # -- weather the password is stored encrypted
+    passwordEncoded: "false"
+    # -- DB credential secret (account, password)
+    secret:
+  meta:
+    # -- Sets the nscale version of this deployment / instance. This is used by the operator to display
+    # the correct version e.g. in the Web UI.
+    # @internal -- this is set by the devOps pipeline, so do not modify
+    nscaleVersion: "9.3.1300"
+nappl:
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1300.2024121814
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: application-layer
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}database.{{ .Release.Namespace }}.svc.cluster.local:5432 -timeout 600"
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: "{{ if .this.jobs }}4{{ else }}6{{ end }}"
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1300"
+web:
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1300.2024121620
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: application-layer-web
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 900"
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 7
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1300"
+mon:
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1000.2024092618
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: monitoring-console
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 8
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1000"
+rs:
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1301.2024121910
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: rendition-server
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 4
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1301"
+nstl:
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1201.2024112518
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: storage-layer
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 3
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1201"
+pipeliner:
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1300.2024121815
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: pipeliner
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 8
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1300"
+administrator:
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1201
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: administrator
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 9
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1201"
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+cmis:
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1200.2024112508
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: cmis-connector
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 8
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1200"
+ilm:
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1000.2024091702
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: ilm-connector
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 8
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1000"
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+# -- For the Database, we use a postgres 16
+# Ceyoniq uses docker.io/bitnami/postgresql:16
+database:
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: "16"
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: bitnami/postgresql
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo:
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 3
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "16"
+application:
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+  nstl:
+    # -- sets the dns of the *nscale Server Storage Layer*, that should be configured
+    host: "{{ .component.prefix }}nstl.{{ .Release.Namespace }}"
+  rs:
+    # -- sets the dns of the *nscale Rendition Server*, that should be configured
+    host: "{{ .component.prefix }}rs.{{ .Release.Namespace }}"
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 11
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1300"
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1300.2024121814
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: application-layer
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+nappljobs:
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1300.2024121814
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: application-layer
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 4
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1300"
+webdav:
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 8
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1000"
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1000.2024091609
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: webdav-connector
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+nstla:
+  clusterService:
+    # -- When using multiple nstl Instances with different configurations, you still might want to use a cluster service for HA access
+    # This will generate one for you.
+    enabled: true
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1201.2024112518
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: storage-layer
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 3
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1201"
+nstlb:
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1201.2024112518
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: storage-layer
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 3
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1201"
+# -- rms is not a Ceyoniq component, but a part of nplus
+rms:
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 10
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "1.2.1200"
+  image:
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: admin-server
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: 1.2.1200
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: cr.nplus.cloud/subscription
+rmsa:
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 10
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "1.2.1200"
+  image:
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: admin-server
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: 1.2.1200
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: cr.nplus.cloud/subscription
+rmsb:
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 10
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "1.2.1200"
+  image:
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: admin-server
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: 1.2.1200
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: cr.nplus.cloud/subscription
+nstlc:
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 3
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1201"
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1201.2024112518
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: storage-layer
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+nstld:
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 3
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1201"
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1201.2024112518
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: storage-layer
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+pam:
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 9
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1200"
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1200.63696
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: process-automation-modeler
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+# -- For SharePoint Connector, there is no entry in Github yet, so we set it hardcoded
+# TODO: 9.3: Test again later, if there is a valid github entry.
+sharepoint:
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 8
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.2.1400"
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+  image:
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: sharepoint-connector
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.2.1400.2024073012
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+dmsapi:
+  meta:
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 8
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+sharepointa:
+  clusterService:
+    # -- When using multiple SharePoint Connectors with different configurations, you still might want to use a retrieval cluster for HA
+    # so you can enable the clusterService and define the context path.
+    enabled: false
+    # -- Set the context Path for the cluster Ingress.
+    # Make sure also the members are listening to this path
+    contextPath: "/nscale_spc"
+  ingress:
+    # -- Defines the context path of this sharepoint instance, in case you might have multiple instances.
+    # We do not want them to consume the same ingress path, because it would block the ingress from being
+    # created.
+    contextPath: "/nscale_spca"
+  image:
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: sharepoint-connector
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.2.1400.2024073012
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  meta:
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.2.1400"
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 8
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+sharepointb:
+  ingress:
+    # -- Defines the context path of this sharepoint instance, in case you might have multiple instances.
+    # We do not want them to consume the same ingress path, because it would block the ingress from being
+    # created.
+    contextPath: "/nscale_spcb"
+  image:
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: sharepoint-connector
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.2.1400.2024073012
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  meta:
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.2.1400"
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 8
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+sharepointc:
+  ingress:
+    # -- Defines the context path of this sharepoint instance, in case you might have multiple instances.
+    # We do not want them to consume the same ingress path, because it would block the ingress from being
+    # created.
+    contextPath: "/nscale_spcc"
+  image:
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: sharepoint-connector
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.2.1400.2024073012
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  meta:
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.2.1400"
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 8
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+sharepointd:
+  ingress:
+    # -- Defines the context path of this sharepoint instance, in case you might have multiple instances.
+    # We do not want them to consume the same ingress path, because it would block the ingress from being
+    # created.
+    contextPath: "/nscale_spcd"
+  image:
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: sharepoint-connector
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.2.1400.2024073012
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
+  meta:
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.2.1400"
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 8
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+prepper:
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: 1.2.1300
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: toolbox2
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: cr.nplus.cloud/subscription
+  meta:
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "1.2.1300"
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 2
+backend:
+  meta:
+    componentVersion: 1.2.1400-124
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 1
+erpproxy:
+  meta:
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.3.1000"
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 8
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.3.1000.2024092409
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: sap-proxy-connector
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/pre-release/nscale
+erpcmis:
+  meta:
+    # -- This is the version of the component, used for display
+    # @internal -- set by devOps pipeline, so do not modify
+    componentVersion: "9.2.1000"
+    # -- Defines the ArgoCD wave in which this component should be installed. 
+    # This setting only applies to scenarios, where ArgoCD is used as handler
+    wave: 8
+  # -- Defines what condition needs to be met before this components starts
+  waitFor:
+    - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+  image:
+    # -- defines the tag for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    tag: ubi.9.2.1000.2024032720
+    # -- sets the name of the image to use for this component
+    # @internal -- set by devOps pipeline, so do not modify
+    name: erp-cmis-connector
+    # -- sets the repo from where to load the image. This can be overridden on environment or instance level
+    # in case you have your own repo for caching and security reasons
+    repo: ceyoniq.azurecr.io/release/nscale
diff --git a/charts/mon/Chart.yaml b/charts/mon/Chart.yaml
new file mode 100644
index 0000000..e36ca0d
--- /dev/null
+++ b/charts/mon/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-mon
+description: nscale Monitoring Console, used to provide sensor information from all components to dashboards
+icon: data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4KPHN2ZyB2ZXJzaW9uPSIxLjEiIGlkPSJFYmVuZV8xIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB4PSIwcHgiIHk9IjBweCIKCSB2aWV3Qm94PSIwIDAgNTEuMDI0IDUxLjAyNCIgZW5hYmxlLWJhY2tncm91bmQ9Im5ldyAwIDAgNTEuMDI0IDUxLjAyNCIgeG1sOnNwYWNlPSJwcmVzZXJ2ZSI+CjxnPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIzMi4zMjIsMTkuNzQ0IDIwLjY0OSwxOS43NDQgMTguNTkxLDMxLjQxNyAzMC4yNjQsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iNDcuMTg1LDE5Ljc0NCAzNS41MTIsMTkuNzQ0IDMzLjQ1NCwzMS40MTcgNDUuMTI2LDMxLjQxNyAJIi8+Cgk8cG9seWdvbiBmaWxsPSIjQTRCRkU0IiBwb2ludHM9IjI5Ljc2NiwzNC41NTEgMTguMDk0LDM0LjU1MSAxNi4wMzUsNDYuMjI0IDI3LjcwOCw0Ni4yMjQgCSIvPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIxNy41NywxOS43NDQgNS44OTcsMTkuNzQ0IDMuODM5LDMxLjQxNyAxNS41MTIsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iMzUuMTUsNC43OTkgMjMuNDc3LDQuNzk5IDIxLjQxOSwxNi40NzIgMzMuMDkyLDE2LjQ3MiAJIi8+Cjwvc3ZnPgo=
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/mon/README.md b/charts/mon/README.md
new file mode 100644
index 0000000..a13dba3
--- /dev/null
+++ b/charts/mon/README.md
@@ -0,0 +1,179 @@
+
+
+# nplus-component-mon
+
+nscale Monitoring Console, used to provide sensor information from all components to dashboards
+
+## Generelle Informationen
+
+- Wenn Ressourcen im Admin hinzugefügt werden, müssen nachträglich die Namen der Server geändert werden.
+  Diese heißen üblicherweise <instance>-nappl oder <instance>-nstl.
+  Also z.B. rms-nappl und rms-nstl
+
+ 
+
+## nplus-component-mon Chart Configuration
+
+You can customize / configure nplus-component-mon by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+activateRmi | Activates the RMI Interface. Due to security concern, this defaults to `false` |  `false` |
+activateSsl | Activates SSL / TLS communication |  `true` |
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"monitoring-console"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/nscalemc"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**javaOpts**&#8203;.javaMaxMem | set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed |   |
+**javaOpts**&#8203;.javaMaxRamPercentage | set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any. |   |
+**javaOpts**&#8203;.javaMinMem | set the minimum memory, java will consume |   |
+**javaOpts**&#8203;.javaMisc | Any misc Java Options that need to be passed to the container |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"java"` |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8387` |
+**meta**&#8203;.ports&#8203;.https | The tls / https port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8388` |
+**meta**&#8203;.ports&#8203;.tcp | A potential tcp port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8389` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"monitoring-console"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"mon"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-monitoring/workspace"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.paths | Sets a list of paths to the data files <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-monitoring/workspace/.metadata"]` |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |  `"10Gi"` |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.license&#8203;.path | Sets the path to the license files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-monitoring/workspace/license.xml"` |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |   |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |   |
+nameOverride | This overrides the output of the internal name function |   |
+nodeSelector | select specific nodes for this component |   |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+
diff --git a/charts/mon/templates/component.tpl b/charts/mon/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/mon/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/mon/templates/ingress.tpl b/charts/mon/templates/ingress.tpl
new file mode 100644
index 0000000..293d27f
--- /dev/null
+++ b/charts/mon/templates/ingress.tpl
@@ -0,0 +1,16 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/mon/templates/networkpolicy.tpl b/charts/mon/templates/networkpolicy.tpl
new file mode 100644
index 0000000..0c969b5
--- /dev/null
+++ b/charts/mon/templates/networkpolicy.tpl
@@ -0,0 +1,44 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+  policyTypes:
+  - Ingress
+  - Egress
+  ingress:
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+
+
+  - from:
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/component: administrator
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+
+  egress:
+  - to:
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/mon/templates/pdb.tpl b/charts/mon/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/mon/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/mon/templates/pvc.tpl b/charts/mon/templates/pvc.tpl
new file mode 100644
index 0000000..b7ac9a2
--- /dev/null
+++ b/charts/mon/templates/pvc.tpl
@@ -0,0 +1 @@
+{{- include "nplus.pvc" . }}
diff --git a/charts/mon/templates/service.tpl b/charts/mon/templates/service.tpl
new file mode 100644
index 0000000..3413b6e
--- /dev/null
+++ b/charts/mon/templates/service.tpl
@@ -0,0 +1,33 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service.
+  # It is purely used to collect the EndPointSlices
+  type: ClusterIP
+  clusterIP: None
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
+
diff --git a/charts/mon/templates/statefulset.tpl b/charts/mon/templates/statefulset.tpl
new file mode 100644
index 0000000..98406be
--- /dev/null
+++ b/charts/mon/templates/statefulset.tpl
@@ -0,0 +1,100 @@
+{{- include "nplus.init" $ -}}
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  serviceName: {{ .component.fullName }}
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: {{ .Values.replicaCount }}
+  podManagementPolicy: OrderedReady
+  updateStrategy:
+    type: {{ .Values.updateStrategy | default "OnDelete" }}  
+  minReadySeconds: 5
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+      
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+      
+      containers:
+      - name: monitoring-console
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+        # -- MC Configuration Settings
+          {{- include "nplus.env" (dict 
+            "RMI_ACTIVE"                (.this.activateRmi | default "false")
+            "SSL_ACTIVE"                (.this.activateSsl | default "true")
+          ) | nindent 10 }}
+        # -- undocumented MC Configuration Settings, found in github
+        #TODO: pls. see "ITSMSD-8923 ENV Variablen nscale MC" for current status
+          {{- include "nplus.env" (dict 
+            "MC_APPENDER"               "Console"
+            "INITIALIZE_COMPOSE"        "true"
+            "MC_PASSWORD"               "admin"
+          ) | nindent 10 }}
+
+        {{- include "nplus.environment" . | nindent 8 }}          
+
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+        startupProbe:
+          httpGet:
+            path: /nscalemc/
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          initialDelaySeconds: 10
+          failureThreshold: 12
+          periodSeconds: 10
+          timeoutSeconds: 5
+        readinessProbe:
+          httpGet:
+            path: /nscalemc/
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+        # -- Ceyoniq does currently not define an *official* livenessProbe, so we use
+        # one that quickly checks the main socket on Layer 4.
+        livenessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          # initialDelaySeconds: 20
+          periodSeconds: 10
+        {{- end }}
+
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+
diff --git a/charts/mon/values.schema.json b/charts/mon/values.schema.json
new file mode 100644
index 0000000..7fd32db
--- /dev/null
+++ b/charts/mon/values.schema.json
@@ -0,0 +1,798 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "activateRmi": {
+      "default": "false",
+      "description": "Activates the RMI Interface. Due to security concern, this defaults to `false`",
+      "title": "activateRmi"
+    },
+    "activateSsl": {
+      "default": "true",
+      "description": "Activates SSL / TLS communication",
+      "title": "activateSsl"
+    },
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "monitoring-console",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.3.1000.2024092618",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/nscalemc",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "javaOpts": {
+      "additionalProperties": false,
+      "description": "Options for the Java VM",
+      "properties": {
+        "javaMaxMem": {
+          "default": "",
+          "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+          "title": "javaMaxMem"
+        },
+        "javaMaxRamPercentage": {
+          "default": "",
+          "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+          "title": "javaMaxRamPercentage"
+        },
+        "javaMinMem": {
+          "default": "",
+          "description": "set the minimum memory, java will consume",
+          "title": "javaMinMem"
+        },
+        "javaMisc": {
+          "default": "",
+          "description": "Any misc Java Options that need to be passed to the container",
+          "title": "javaMisc"
+        }
+      },
+      "title": "javaOpts"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "description": "defines internal constants for nplus. do not change these values",
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "java",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8387",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "8388",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "8389",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "monitoring-console",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "mon",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-monitoring/workspace",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "10Gi",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-monitoring/workspace/license.xml",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "There should only be a single Monitoring instance, so the replicaCount is fixed to 1 @ignore -- Do not change this.",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/mon/values.yaml b/charts/mon/values.yaml
new file mode 100644
index 0000000..e06a9fd
--- /dev/null
+++ b/charts/mon/values.yaml
@@ -0,0 +1,403 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the temporary disk (all paths)
+    size:
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-monitoring/workspace"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size:
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-monitoring/workspace/license.xml"
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- Sets the size of the data disk
+    size: "10Gi"
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/nscale-monitoring/workspace/.metadata"
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+  file:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- Options for the Java VM
+javaOpts:
+  # -- set the percentage of RAM, Java will use of the total.
+  # The total amount is the amount installed in the K8s Cluster Node,
+  # OR the Memory Limit set (see resources), if any.
+  javaMaxRamPercentage:
+  # -- set the minimum memory, java will consume
+  javaMinMem:
+  # -- set the maximum memory, java will consume.
+  # Attention: This is NOT the real maximum and it does not include any non Java memory.
+  # Please read google, as this is highly discussed
+  javaMaxMem:
+  # -- Any misc Java Options that need to be passed to the container
+  javaMisc:
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: monitoring-console
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- defines internal constants for nplus.
+# do not change these values
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: mon
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8387
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https: 8388
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp: 8389 # rmi
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: java
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: monitoring-console
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- There should only be a single Monitoring instance, so the replicaCount is
+# fixed to 1
+# @ignore -- Do not change this.
+replicaCount: 1
+# -- Activates the RMI Interface. Due to security concern, this defaults to `false`
+activateRmi: false
+# -- Activates SSL / TLS communication
+activateSsl: true
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: true
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/nscalemc"
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/nappl/Chart.yaml b/charts/nappl/Chart.yaml
new file mode 100644
index 0000000..52db35b
--- /dev/null
+++ b/charts/nappl/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-nappl
+description: nscale Server Application Layer, the central component in the nscale ecosystem
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/nappl/README.md b/charts/nappl/README.md
new file mode 100644
index 0000000..6e42e75
--- /dev/null
+++ b/charts/nappl/README.md
@@ -0,0 +1,251 @@
+
+
+# nplus-component-nappl
+
+nscale Server Application Layer, the central component in the nscale ecosystem
+
+## nplus-component-nappl Chart Configuration
+
+You can customize / configure nplus-component-nappl by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+**database**&#8203;.account | alternative 1: the account name of the technical DB user for nscale |   |
+**database**&#8203;.dialect | the database dialect to use |   |
+**database**&#8203;.driverclass | the driver class to use |   |
+**database**&#8203;.name | the name of the database to use |   |
+**database**&#8203;.password | alternative 1: the password of the technical DB user for nscale |   |
+**database**&#8203;.passwordEncoded | weather the DB password is stored encrypted |   |
+**database**&#8203;.schema | the database schema to use |   |
+**database**&#8203;.secret | alternative 2: use a secret for the account and password |   |
+**database**&#8203;.url | the DB URL |   |
+disableSessionReplication | enables/disables the session replication for these cluster members. |   |
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"application-layer"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/nscalealinst1"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |  `["/nscalealinst1/webc/configuration", "/nscalealinst1/webb/configuration"]` |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `false` |
+**ingress**&#8203;.includeDefaultPaths | toggles default paths like index.html, res and engine.properties |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**javaOpts**&#8203;.javaMaxMem | set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed |   |
+**javaOpts**&#8203;.javaMaxRamPercentage | set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any. |   |
+**javaOpts**&#8203;.javaMinMem | set the minimum memory, java will consume |   |
+**javaOpts**&#8203;.javaMisc | Any misc Java Options that need to be passed to the container |   |
+jobs | enables/disables the job affinity / priority for these cluster members |  `true` |
+**kubePing**&#8203;.create | Creates the ServiceAccount (only if Version < 9.1.1200) Later Versions use a Cluster Service and resolve the IP Adresses from the EndpointSlices |  `true` |
+**kubePing**&#8203;.name | Set the ServiceAccount Name for the kubePing Protocol |  `"{{ .component.fullName }}-kubeping"` |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"java"` |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8080` |
+**meta**&#8203;.ports&#8203;.https | The tls / https port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8443` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"application-layer"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"core"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCount | if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas. |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.paths | Sets the path to the certs folder. <br>do not change this value | **info only**, do not change<br> `["/etc/pki/tls/certs/ca-bundle.crt", "/usr/lib/jvm/jre/lib/security/cacerts"]` |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.paths | Sets the path to the component certs. <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-server/application-layer/conf/certificates.store"]` |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-server/application-layer/conf"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.fonts&#8203;.path | Sets the path to the fonts folder. <br>do not change this value | **info only**, do not change<br> `"/usr/share/fonts/truetype/nplus"` |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.license&#8203;.path | Sets the path to the license files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-server/application-layer/conf/license.xml"` |
+**mounts**&#8203;.logs&#8203;.path | Sets the path to the log files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-server/application-layer/logs"` |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |  `"1Gi"` |
+**mounts**&#8203;.temp&#8203;.paths | Sets a list of paths to the temporary files <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-server/application-layer/temp", "/tmp"]` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"5Gi"` |
+nameOverride | This overrides the output of the internal name function |   |
+**priority**&#8203;.className | Set the priority class for the Application Layer deployment if desired |   |
+**priority**&#8203;.createClass | Creates an individual PriorityClass for this instance |  `true` |
+**priority**&#8203;.value | Sets the priorityValue |  1000000 |
+replicaCount | Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1. |  `1` |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.cni&#8203;.dbIpRange | defines the IP Range of out-of-cluster DB Servers, that the nappl is allowed to communicate with. |   |
+**security**&#8203;.cni&#8203;.sapIpRange | defines the IP Range of out-of-cluster SAP Servers, that the nappl is allowed to communicate with. |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+sessionCacheStorageType | Sets the Session Cache Storage Type to HEAP or OFF_HEAP |   |
+**snc**&#8203;.enabled | Enables the NAPPL SNC to access SAP Systems. Since nscale 8, the configuration is done in the Administration Client. |  `false` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |  `[]` |
+updateStrategy | the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures. |  `"RollingUpdate"` |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+
+## Working with SNC (SAP Secure Network Communication)
+
+If you want to send data back to an SAP System, you can use SNC for that. The Configuration can be done in *nscale Administrator*, but you will need some SAP Components that are required in the NAPPL container.
+
+So enable *snc* in the Application Layer, turn it on:
+
+```
+nappl:
+  snc:
+  enabled: true
+```
+
+After turning this on, the Application Layer Container will mount the *snc* directory from the *configuration pool* of the environment. You can upload the required *SAP* components there:
+
+```
+kubectl cp snc nplus-toolbox-0:/conf/pool
+```
+
+An example directory would look like this:
+
+```
+$ cd /conf/pool/snc
+$ ls -lah
+total 12M
+drwxrwsr-x 2 nplus nplus    6 Jun  7 13:20 .
+drwxrwsr-x 8 nplus nplus    7 Jun  7 13:19 ..
+-rwxr-xr-x 1 nplus nplus  128 Jun  7 13:20 cred_v2
+-rwxr-xr-x 1 nplus nplus 5.3M Jun  7 13:20 libsapcrypto.so
+-rwxr-xr-x 1 nplus nplus 5.2M Jun  7 13:20 libsapjco3.so
+-rwxr-xr-x 1 nplus nplus  38K Jun  7 13:20 sapgenpse
+-rwxr-xr-x 1 nplus nplus 1.5M Jun  7 13:20 sapjco3.jar
+-rw-r--r-- 1 nplus nplus 5.5K Jun  7 13:20 snc.pse
+```
+
+This pool directory is automatically mounted to the Application Layer in `/opt/snc`, if `snc.enabled` is set to `true`.
+Aditionally, the `SECUDIR` environment variable is set to `/opt/snc`in the container, telling SNC where to find the libraries and credentials.
+
+You can add an IP Range to Whitelist the SAP Systems and allow egress traffic to pass.
+
+```
+nappl:
+  snc:
+    sapIpRange: "10.17.23.0/24"
+```
+
+This creates an egress Network Policy that allows access to the SAP Systems in the specified IP Range.
+
+> You can als set this on
+> - security.cni.sapIpRange
+> - global.security.cni.sapIpRange
+> - global.environment.security.cni.sapIpRange
+
+### Notes
+
+- Please be aware, that *currently* the *nscale Server Application Layer* Image provided by Ceyoniq has no username set. That results in the user being called *default* in the image, which is set by the *currently* used UBI Base Image. This might change in the future. **When you generate the SNC Certificate**, you need to use this username **default** however, as otherwise the certificate will not be accepted.
+
diff --git a/charts/nappl/templates/component.tpl b/charts/nappl/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/nappl/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/nappl/templates/hpa.tpl b/charts/nappl/templates/hpa.tpl
new file mode 100644
index 0000000..27cba95
--- /dev/null
+++ b/charts/nappl/templates/hpa.tpl
@@ -0,0 +1,20 @@
+{{- if .Values.autoScale }}
+apiVersion: autoscaling/v1
+kind: HorizontalPodAutoscaler
+metadata:
+  name: {{ .component.fullName }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.argoWave" . | nindent 4 }}
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: StatefulSet
+    name: {{ .component.fullName }}
+    minReplicas: {{ .Values.replicaCount }}
+    maxReplicas: {{ .Values.autoScale }}
+  targetCPUUtilizationPercentage: 80
+{{- end }}
\ No newline at end of file
diff --git a/charts/nappl/templates/ingress.tpl b/charts/nappl/templates/ingress.tpl
new file mode 100644
index 0000000..0c07d42
--- /dev/null
+++ b/charts/nappl/templates/ingress.tpl
@@ -0,0 +1,39 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+      {{- if .Values.ingress.includeDefaultPaths }}
+      - path: /index.html
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+      - path: /res
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+      - path: /engine.properties
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+      {{- end }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/nappl/templates/networkpolicy.tpl b/charts/nappl/templates/networkpolicy.tpl
new file mode 100644
index 0000000..e5e94dc
--- /dev/null
+++ b/charts/nappl/templates/networkpolicy.tpl
@@ -0,0 +1,210 @@
+{{- include "nplus.init" $ -}}
+{{- $sapIpRange   := ( (.Values.snc).sapIpRange | default ((.this.security).cni).sapIpRange ) }}
+
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+
+  policyTypes:
+  - Ingress
+  - Egress
+
+  ingress:
+
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+
+  - from:
+    # access from nappl core in the same instance to setup a cluster
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: core
+    ports:
+    {{- include "nplus.napplClusterPolicyPorts" . | nindent 4 }}
+    
+  - from:
+    # access from application-layer-setup container in the same instance
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: application
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+
+  - from:
+    # access from application-layer-web in the same instance
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: web
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+
+  - from:
+    # access from pipeliner in the same instance
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          # Allow both, Core Mode and AC Mode.
+          # Core Mode Cluster ist handles above
+          nplus/component: pipeliner
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+
+  - from:
+    # access from cmis-connector in the same instance
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: cmis
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+
+  - from:
+    # access from ilm-connector in the same instance
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: ilm
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+    
+  - from:
+    # access from webdav-connector in the same instance
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: webdav
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+
+#  - from:
+#    # access from xta-connector in the same instance
+#    - podSelector:
+#        matchLabels:
+#          app: xta-connector
+#    ports:
+#      - protocol: TCP
+#        port: {{ (.this.meta).ports.http }}
+#  - from:
+#    # access from process-automation-modeler in the same namespace
+#    - podSelector:
+#        matchLabels:
+#          app: process-automation-modeler
+#    ports:
+#      - protocol: TCP
+#        port: {{ (.this.meta).ports.http }}
+
+  - from:
+    # PAM Access
+    - namespaceSelector:
+        matchExpressions:
+          - {key: kubernetes.io/metadata.name, operator: In, values: [{{ .this.security.cni.pamNamespace }}]}
+    - podSelector:
+        matchLabels:
+          nplus/instance: {{ .this.security.cni.pamInstance }}
+          nplus/component: pam
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+
+  {{- include "nplus.networkpolicy.allowFromAdmin" . | nindent 2 }}
+  {{- include "nplus.networkpolicy.allowFromMon" . | nindent 2 }}
+
+  egress:
+
+  {{- if and (.Values.snc).enabled $sapIpRange }}
+  #
+  # Allow access to out-of-cluster SAP Systems for SNC
+  #
+  - to:
+    - ipBlock:
+        cidr: {{ $sapIpRange }}
+  {{- end }}
+
+  {{- with ((.this.security).cni).dbIpRange }}
+  #
+  # Allow access to out-of-cluster DB Systems
+  #
+  - to:
+    - ipBlock:
+        cidr: {{ . }}
+  {{- end }}
+
+  #
+  # allow database access in the same instance
+  #
+  - to:
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: database
+  #
+  # allow access to other cluster pods
+  #
+  - to:
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: core
+  #
+  # access to storage-layer in the same instance
+  #
+  - to:
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: nstl
+  #
+  # access to rendition server in the same instance
+  #
+  - to:
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: rs
+
+  {{- if eq ((semver .component.version) | (semver "9.1.1200").Compare) 1 }}
+  #
+  # access to Kubernetes API for KubePing in older versions of nappl
+  #
+  # {{ .component.version }} is less than 9.1.1200 ({{ semver .component.version | (semver "9.1.1200").Compare }})
+  # so we add the old kubePing mechanics.
+  - ports:
+      - protocol: TCP
+        port: 16443
+      - protocol: TCP
+        port: 443
+  {{- end }}
+
+{{- end }}
\ No newline at end of file
diff --git a/charts/nappl/templates/pdb.tpl b/charts/nappl/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/nappl/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/nappl/templates/priorityclass.tpl b/charts/nappl/templates/priorityclass.tpl
new file mode 100644
index 0000000..ecd4280
--- /dev/null
+++ b/charts/nappl/templates/priorityclass.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.priorityClass" . }}
diff --git a/charts/nappl/templates/pvc.tpl b/charts/nappl/templates/pvc.tpl
new file mode 100644
index 0000000..b79132a
--- /dev/null
+++ b/charts/nappl/templates/pvc.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.pvc" . }}
diff --git a/charts/nappl/templates/rbackubeping.tpl b/charts/nappl/templates/rbackubeping.tpl
new file mode 100755
index 0000000..53cd813
--- /dev/null
+++ b/charts/nappl/templates/rbackubeping.tpl
@@ -0,0 +1,60 @@
+{{- include "nplus.init" $ -}}
+{{- if eq ((semver .component.version) | (semver "9.1.1200").Compare) 1 -}}
+{{- if (.Values.kubePing).name -}}
+{{- if (.Values.kubePing).create -}}
+# {{ .component.version }} is less than 9.1.1200 ({{ semver .component.version | (semver "9.1.1200").Compare }})
+# so we add the old kubePing mechanics.
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ tpl .Values.kubePing.name . }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+---
+{{- end }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ tpl .Values.kubePing.name . }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+rules:
+- apiGroups: [""]
+  resources: ["pods"]
+  verbs: ["get", "list"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ tpl .Values.kubePing.name . }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: {{ tpl .Values.kubePing.name . }}
+subjects:
+- kind: ServiceAccount
+  name: {{ tpl .Values.kubePing.name . }}
+{{- end }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/nappl/templates/service.tpl b/charts/nappl/templates/service.tpl
new file mode 100644
index 0000000..bf14425
--- /dev/null
+++ b/charts/nappl/templates/service.tpl
@@ -0,0 +1,30 @@
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+  type: ClusterIP
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
+  sessionAffinity: ClientIP
+  sessionAffinityConfig:
+    clientIP:
+      timeoutSeconds: 1800
diff --git a/charts/nappl/templates/statefulset.tpl b/charts/nappl/templates/statefulset.tpl
new file mode 100644
index 0000000..4c0a088
--- /dev/null
+++ b/charts/nappl/templates/statefulset.tpl
@@ -0,0 +1,281 @@
+{{- include "nplus.init" $ -}}
+# Component: {{ .component.chartName }}
+#
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  serviceName: {{ .component.fullName }}
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  {{- if not .Values.autoScale }}
+  replicas: {{ .Values.replicaCount }}
+  {{- end }}
+  podManagementPolicy: OrderedReady
+  updateStrategy:
+    type: {{ .Values.updateStrategy | default "OnDelete" }}  
+  minReadySeconds: 5
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+        ceyoniq.com/application-layer-cluster-name: "{{ .Release.Name }}"
+        nplus/jobs: {{ .this.jobs | quote }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.priorityClassName" . | nindent 6 }}
+      {{- include "nplus.templateAffinity" . | nindent 6 }}
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+
+      {{- if eq ((semver .component.version) | (semver "9.1.1200").Compare) 1 }}
+      serviceAccountName: {{ tpl .Values.kubePing.name . }}
+      {{- else }}
+      automountServiceAccountToken: false
+      {{- end }}
+
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+
+      # 1. RMS / Administrator funktionieren nicht, wenn die service.conf nicht existiert.
+      #    Die darf leer sein, wird aber wohl vom Admin auf Anwesenheit geprüft.
+      # 2. Man kann im Admin den NAPPL nicht hochfahren, wenn die dbUrl leer ist. Also füllen wir sie,
+      #    falls sie per ENV gesetzt wird.
+      - name: make-rms-work
+        image: {{ include "nplus.image" (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        {{- include "nplus.initResources" . | nindent 8 }}
+        command: [ "/bin/sh", "-c" ]
+        args:
+        - |
+          echo "Touching service.conf"
+          touch /mnt/conf/service.conf
+          {{- if (.this.database).url }}
+          echo "dbUrl is set per ENV to {{ (.this.database).url }}"
+          echo "testing and patching templates/instance1.conf.template"
+          test -f /mnt/conf/templates/instance1.conf.template \
+             && sed -i 's#^core.db.url=$#core.db.url={{ (.this.database).url }}#g' /mnt/conf/templates/instance1.conf.template \
+             || echo "/mnt/conf/templates/instance1.conf.template not found. Make sure you run copyconf first"
+          echo "testing and patching instance1.conf"
+          test -f /mnt/conf/instance1.conf \
+             && sed -i 's#^core.db.url=$#core.db.url={{ (.this.database).url }}#g' /mnt/conf/instance1.conf \
+             || echo "/mnt/conf/instance1.conf not found. This is ok, if it is the first start."
+          echo "done."
+          {{- end }}
+        volumeMounts:
+        - name: conf
+          subPath: {{ .component.storagePath | quote }}
+          mountPath: /mnt/conf
+
+      containers:
+      - name: application-layer
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+
+        env:
+          {{- if (.this.ingress).domain }}
+          # -- if you use SAML, it is important, that the Application Layer knows its external URL to be able
+          # to redirect the SAML request correctly. So we provide it here:
+          - name: SERVER_BASE_URL
+            value: "https://{{ .this.ingress.domain }}"
+          {{- end }}
+
+          # -- SAP SNC Values
+          {{- if (.Values.snc).enabled }}
+          - name: SECUDIR
+            value: "/opt/snc"
+          - name: SNC_LIB
+            value: "/opt/snc/libsapcrypto.so"
+          {{- else }}
+          # there is no definition for .Values.snc, so no snc features are rendered
+          {{- end }}
+          # -- Instance Configuration Values
+          - name: AL_APPENDER
+            value: "stdout"
+
+          {{- if (.this.database).url }}
+          # -- the database definition for the application layer is made within
+          # the values file or command line settings. Another option would be
+          # to leave out the database definition completely, then it would read
+          # the definition from the config file
+          - name: INSTANCE1_CORE_DB_DIALECT
+            value: "{{ required "if database.Url is defined, .dialect is required" (.this.database).dialect }}"
+          - name: INSTANCE1_CORE_DB_DRIVERCLASS
+            value: "{{ required "if database.Url is defined, .driverclass is required" (.this.database).driverclass }}"
+          - name: INSTANCE1_CORE_DB_URL
+            value: "{{ tpl (required "if database.Url is defined, .url is required" (.this.database).url ) . }}"
+          {{- if (.this.database).secret }}
+          # -- username and password are taken from a secret
+          - name: INSTANCE1_CORE_DB_USERNAME
+            valueFrom:
+              secretKeyRef:
+                name: {{ (.this.database).secret }}
+                key: account
+          - name: INSTANCE1_CORE_DB_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: {{ (.this.database).secret }}
+                key: password
+          {{- else }}
+          # -- username and password are taken from
+          # the manifest. You should not do this in production
+          # but rather define a secret for it.
+          - name: INSTANCE1_CORE_DB_USERNAME
+            value: {{ required "if database.Url is defined, .username (or Secret) is required" (.this.database).account | quote}}
+          - name: INSTANCE1_CORE_DB_PASSWORD
+            value: {{ required "if database.Url is defined, .password (or Secret) is required" (.this.database).password | quote }}
+          {{- end }}
+          - name: INSTANCE1_CORE_DB_PASSWORD_ENCODED
+            value: {{ required "if database.Url is defined, .passwordEncoded is required to be true or false" (.this.database).passwordEncoded | quote }}
+          - name: INSTANCE1_CORE_DB_PASSWORD_ENCODED_STRONG
+            value: "false"
+          - name: INSTANCE1_CORE_DB_SCHEMA
+            value: {{ required "if database.Url is defined, .schema is required" (.this.database).schema | quote }}
+          {{- else }}
+          # there is no definition for the database, so no the database definition is left to be defined
+          # at some other place (ENV Variables in Values File or NAPPL Config File)
+          {{- end }}
+          #
+          # nappl Cluster-Settings. Should be the same for all potential cluster nodes,
+          # including nappljobs and pipeliner core mode.
+          #
+          {{- if lt ((semver .component.version) | (semver "9.1.1200").Compare) 1 }}
+          # Starting Version 9.1, we need to switch the cluster communication to
+          # the new jgroups
+          - name: INSTANCE1_CLUSTER_CORE_STACKTYPE
+            value: "KUBERNETES"
+          - name: INSTANCE1_JGROUPS_DNS_QUERY
+            value: "{{ .component.prefix }}nappl-cluster"
+          {{- else }}
+          # Not generating INSTANCE1_CLUSTER_CORE_STACKTYPE into manifest, as this component
+          # version is {{ .component.version }} so before 9.1.1200 when the new jGroups was 
+          # deployed.
+          {{- end }}
+
+          - name: INSTANCE1_CLUSTER_CORE_CLUSTER_ID
+            value: "{{ .Release.Namespace }}_{{ .Release.Name }}"
+          - name: INSTANCE1_CLUSTER_CORE_NAME
+            value: "{{ .Release.Namespace }}_{{ .Release.Name }}"
+          - name: INSTANCE1_CLUSTER_CORE_DESCRIPTION
+            value: "{{ .Release.Name }} Cluster in {{ .Release.Namespace }} namespace"
+
+          # -- Jobs
+          {{- if .Values.jobs }}
+          # This is a cluster member that is allowed to run jobs, so no changes to the default behaviour
+          {{- else }}
+          # These cluster members should not run jobs, only if necessary
+          - name: INSTANCE1_CLUSTER_CORE_JOB_COORDINATOR_PRIORITY
+            value: "0"
+          {{- end }}
+          # -- # Session Settings
+          {{- if .Values.disableSessionReplication }}
+          - name: INSTANCE1_CORE_CLUSTER_SESSION_REPLICATION_DISABLE
+            value: {{ .Values.disableSessionReplication | quote }}
+          {{- end }}
+          {{- if .Values.sessionCacheStorageType }}
+          - name: SESSION_CACHE_STORAGE_TYPE
+            value: {{ .Values.sessionCacheStorageType | quote }}
+          {{- end }}
+
+          # TODO: Muss das hier nun rein oder raus?
+          #
+          # In der nscalealinst1.conf steht dazu:
+          # Fulltext index mirror localcache, (on|off) default off
+          # Instructs the server to write the fulltext index on the local
+          # file system if set to on.
+          # It is recommended to set index.mirror.localcache to on when activating 
+          # fulltext for repository or workflow, because this will
+          # increase the fulltext search performance significantly (see public documentation 
+          # to get information about needed harddisk space).
+          # The pipeliner has to set this parameter to off.
+          #
+          # - name: INSTANCE1_CORE_FULLTEST_INDEX_MIRROR_LOCALCACHE
+          #   value: "off"
+
+          - name: METRICS_ALLOW_REMOTE_REQUESTS
+            value: "true"
+
+          - name: KUBERNETES_NAMESPACE
+            valueFrom:
+              fieldRef:
+                fieldPath: metadata.namespace
+
+          {{- include "nplus.appDynamicsEnv" . | nindent 10 }}
+        
+        {{- include "nplus.environment" . | nindent 8 }}
+
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+        startupProbe:
+          httpGet:
+            path: /jmx/status
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          initialDelaySeconds: 30
+          failureThreshold: 30
+          periodSeconds: 10
+          timeoutSeconds: 5
+        readinessProbe:
+          httpGet:
+            path: /jmx/status
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          periodSeconds: 10
+          timeoutSeconds: 1
+          failureThreshold: 3
+        livenessProbe:
+          httpGet:
+            path: /jmx/status
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          periodSeconds: 60
+          timeoutSeconds: 5
+          failureThreshold: 10
+        {{- end }}
+
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+        {{- if (.Values.snc).enabled }}
+        - name: conf
+          subPath: "pool/snc"
+          mountPath: "/opt/snc"
+        - name: conf
+          subPath: "pool/snc/libsapcrypto.so"
+          mountPath: "/opt/ceyoniq/nscale-server/application-layer/lib/libsapcrypto.so"
+        - name: conf
+          subPath: "pool/snc/sapjco3.jar"
+          mountPath: "/opt/ceyoniq/nscale-server/application-layer/lib/sapjco3.jar"
+        - name: conf
+          subPath: "pool/snc/libsapjco3.so"
+          mountPath: "/opt/ceyoniq/nscale-server/application-layer/lib/libsapjco3.so"
+        {{- end }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
diff --git a/charts/nappl/values.schema.json b/charts/nappl/values.schema.json
new file mode 100644
index 0000000..5c4468e
--- /dev/null
+++ b/charts/nappl/values.schema.json
@@ -0,0 +1,965 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "database": {
+      "additionalProperties": false,
+      "description": "If you define the database in your values, this DB settings are taken. If you leave this empty, the settings from the config file are used.",
+      "properties": {
+        "account": {
+          "default": "",
+          "description": "alternative 1: the account name of the technical DB user for nscale",
+          "title": "account"
+        },
+        "dialect": {
+          "default": "",
+          "description": "the database dialect to use",
+          "title": "dialect"
+        },
+        "driverclass": {
+          "default": "",
+          "description": "the driver class to use",
+          "title": "driverclass"
+        },
+        "name": {
+          "default": "",
+          "description": "the name of the database to use",
+          "title": "name"
+        },
+        "password": {
+          "default": "",
+          "description": "alternative 1: the password of the technical DB user for nscale",
+          "title": "password"
+        },
+        "passwordEncoded": {
+          "default": "",
+          "description": "weather the DB password is stored encrypted",
+          "title": "passwordEncoded"
+        },
+        "schema": {
+          "default": "",
+          "description": "the database schema to use",
+          "title": "schema"
+        },
+        "secret": {
+          "default": "",
+          "description": "alternative 2: use a secret for the account and password",
+          "title": "secret"
+        },
+        "url": {
+          "default": "",
+          "description": "the DB URL",
+          "title": "url"
+        }
+      },
+      "title": "database"
+    },
+    "disableSessionReplication": {
+      "default": "",
+      "description": "enables/disables the session replication for these cluster members.",
+      "title": "disableSessionReplication"
+    },
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "application-layer",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.3.1300.2024121814",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/nscalealinst1",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "false",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "includeDefaultPaths": {
+          "default": "true",
+          "description": "toggles default paths like index.html, res and engine.properties",
+          "title": "includeDefaultPaths"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "javaOpts": {
+      "additionalProperties": false,
+      "description": "Options for the Java VM",
+      "properties": {
+        "javaMaxMem": {
+          "default": "",
+          "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+          "title": "javaMaxMem"
+        },
+        "javaMaxRamPercentage": {
+          "default": "",
+          "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+          "title": "javaMaxRamPercentage"
+        },
+        "javaMinMem": {
+          "default": "",
+          "description": "set the minimum memory, java will consume",
+          "title": "javaMinMem"
+        },
+        "javaMisc": {
+          "default": "",
+          "description": "Any misc Java Options that need to be passed to the container",
+          "title": "javaMisc"
+        }
+      },
+      "title": "javaOpts"
+    },
+    "jobs": {
+      "default": "true",
+      "description": "enables/disables the job affinity / priority for these cluster members",
+      "title": "jobs"
+    },
+    "kubePing": {
+      "additionalProperties": false,
+      "description": "sets the serviceAccount for NAPPL. Up to 9.1.1100, this was needed for  the cluster communication (kubePing). Starting 9.1.1201, this is not the case any more If it is left empty, also the automountServiceAccountToken is disabled. If you set Values, they are ignored in Versions > 9.1.1200",
+      "properties": {
+        "create": {
+          "default": "true",
+          "description": "Creates the ServiceAccount (only if Version < 9.1.1200) Later Versions use a Cluster Service and resolve the IP Adresses from the EndpointSlices",
+          "title": "create"
+        },
+        "name": {
+          "default": "{{ .component.fullName }}-kubeping",
+          "description": "Set the ServiceAccount Name for the kubePing Protocol",
+          "title": "name"
+        }
+      },
+      "title": "kubePing"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "description": "defines internal constants for nplus. do not change these values",
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "java",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8080",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "8443",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "application-layer",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "core",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta"
+    },
+    "minReplicaCount": {
+      "default": "",
+      "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+      "title": "minReplicaCount"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-server/application-layer/conf",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "/usr/share/fonts/truetype/nplus",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-server/application-layer/conf/license.xml",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-server/application-layer/logs",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "5Gi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nodeSelector": {
+      "additionalProperties": false,
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "priority": {
+      "additionalProperties": false,
+      "description": "You can give a component a specific priorityClass to implement a quality of service. You can leave this empty, then no priority is set. If you set a class, this class is taken If you additionally enable create, the class is created for you with the value defined.",
+      "properties": {
+        "className": {
+          "default": "",
+          "description": "Set the priority class for the Application Layer deployment if desired",
+          "title": "className"
+        },
+        "createClass": {
+          "default": "true",
+          "description": "Creates an individual PriorityClass for this instance",
+          "title": "createClass"
+        },
+        "value": {
+          "default": "1000000",
+          "description": "Sets the priorityValue",
+          "title": "value"
+        }
+      },
+      "title": "priority"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "cni": {
+          "additionalProperties": false,
+          "properties": {
+            "dbIpRange": {
+              "default": "",
+              "description": "defines the IP Range of out-of-cluster DB Servers, that the nappl is allowed to communicate with.",
+              "title": "dbIpRange"
+            },
+            "sapIpRange": {
+              "default": "",
+              "description": "defines the IP Range of out-of-cluster SAP Servers, that the nappl is allowed to communicate with.",
+              "title": "sapIpRange"
+            }
+          },
+          "title": "cni",
+          "type": "object"
+        },
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "sessionCacheStorageType": {
+      "default": "",
+      "description": "Sets the Session Cache Storage Type to HEAP or OFF_HEAP",
+      "title": "sessionCacheStorageType"
+    },
+    "snc": {
+      "additionalProperties": false,
+      "properties": {
+        "enabled": {
+          "default": "false",
+          "description": "Enables the NAPPL SNC to access SAP Systems. Since nscale 8, the configuration is done in the Administration Client.",
+          "title": "enabled"
+        }
+      },
+      "title": "snc",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "description": "Set tolerations for this component",
+      "items": {},
+      "title": "tolerations"
+    },
+    "updateStrategy": {
+      "default": "RollingUpdate",
+      "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+      "title": "updateStrategy"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/nappl/values.yaml b/charts/nappl/values.yaml
new file mode 100644
index 0000000..32d36f3
--- /dev/null
+++ b/charts/nappl/values.yaml
@@ -0,0 +1,473 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: false
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+    - "/nscalealinst1/webc/configuration"
+    - "/nscalealinst1/webb/configuration"
+  # -- toggles default paths like index.html, res and engine.properties
+  includeDefaultPaths: true
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/nscalealinst1"
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# -- Sets the number of replicas in this replicaSet.
+# Some Components (like nstl or sharepoint) only allow a count of 1.
+replicaCount: 1
+# -- the update Strategy for this component. Normally, you can update all components
+# rolling, except for nappl, where you need to follow the documented update procedures.
+updateStrategy: RollingUpdate
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  cni:
+    # -- defines the IP Range of out-of-cluster SAP Servers, that the nappl is allowed to communicate with.
+    sapIpRange:
+    # -- defines the IP Range of out-of-cluster DB Servers, that the nappl is allowed to communicate with.
+    dbIpRange:
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/nscale-server/application-layer/temp"
+      - "/tmp"
+    # -- Sets the size of the temporary disk (all paths)
+    size: "5Gi"
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: /opt/ceyoniq/nscale-server/application-layer/conf
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path: /opt/ceyoniq/nscale-server/application-layer/logs
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size: "1Gi"
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path: /opt/ceyoniq/nscale-server/application-layer/conf/license.xml
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path: /usr/share/fonts/truetype/nplus
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+      - "/etc/pki/tls/certs/ca-bundle.crt"
+      - "/usr/lib/jvm/jre/lib/security/cacerts"
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/nscale-server/application-layer/conf/certificates.store"
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+  file:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: application-layer
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+# -- You can give a component a specific priorityClass to implement a quality of service.
+# You can leave this empty, then no priority is set. If you set a class, this class is taken
+# If you additionally enable create, the class is created for you with the value defined.
+priority:
+  # -- Set the priority class for the Application Layer deployment if desired
+  className:
+  # -- Creates an individual PriorityClass for this instance
+  createClass: true
+  # -- Sets the priorityValue
+  # @default -- 1000000
+  value:
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- defines internal constants for nplus.
+# do not change these values
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: core
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8080
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https: 8443
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: java
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: application-layer
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations: []
+# -- select specific nodes for this component
+nodeSelector: {}
+# -- sets the serviceAccount for NAPPL. Up to 9.1.1100, this was needed for 
+# the cluster communication (kubePing). Starting 9.1.1201, this is not the case any more
+# If it is left empty, also the automountServiceAccountToken is disabled.
+# If you set Values, they are ignored in Versions > 9.1.1200
+kubePing:
+  # -- Set the ServiceAccount Name for the kubePing Protocol
+  name: "{{ .component.fullName }}-kubeping"
+  # -- Creates the ServiceAccount (only if Version < 9.1.1200)
+  # Later Versions use a Cluster Service and resolve the IP Adresses from the EndpointSlices
+  create: true
+snc:
+  # -- Enables the NAPPL SNC to access SAP Systems.
+  # Since nscale 8, the configuration is done in the Administration Client.
+  enabled: false
+# -- enables/disables the job affinity / priority for these cluster
+# members
+jobs: true
+# -- enables/disables the session replication for these cluster
+# members.
+disableSessionReplication:
+# -- Sets the Session Cache Storage Type to
+# HEAP or OFF_HEAP
+sessionCacheStorageType:
+# -- If you define the database in your values, this DB settings are taken.
+# If you leave this empty, the settings from the config file are used.
+database:
+  # -- the name of the database to use
+  name:
+  # -- the database schema to use
+  schema:
+  # -- the database dialect to use
+  dialect:
+  # -- the driver class to use
+  driverclass:
+  # -- the DB URL
+  url:
+  # -- alternative 1: the account name of the technical DB user for nscale
+  account:
+  # -- alternative 1: the password of the technical DB user for nscale
+  password:
+  # -- weather the DB password is stored encrypted
+  passwordEncoded:
+  # -- alternative 2: use a secret for the account and password
+  secret:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+# -- Options for the Java VM
+javaOpts:
+  # -- set the percentage of RAM, Java will use of the total.
+  # The total amount is the amount installed in the K8s Cluster Node,
+  # OR the Memory Limit set (see resources), if any.
+  javaMaxRamPercentage:
+  # -- set the minimum memory, java will consume
+  javaMinMem:
+  # -- set the maximum memory, java will consume.
+  # Attention: This is NOT the real maximum and it does not include any non Java memory.
+  # Please read google, as this is highly discussed
+  javaMaxMem:
+  # -- Any misc Java Options that need to be passed to the container
+  javaMisc:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCount, a podDesruptionBudget will be created with this value as
+# minAvailable, using the full component as selector. This is useful for components, that are
+# using multiple replicas.
+minReplicaCount:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/nstl/Chart.yaml b/charts/nstl/Chart.yaml
new file mode 100644
index 0000000..81eea24
--- /dev/null
+++ b/charts/nstl/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-nstl
+description: nscale Server Storage Layer, virtualizing the storage to be used by the nscale Server
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/nstl/README.md b/charts/nstl/README.md
new file mode 100644
index 0000000..8bf01a0
--- /dev/null
+++ b/charts/nstl/README.md
@@ -0,0 +1,246 @@
+
+
+# nplus-component-nstl
+
+nscale Server Storage Layer, virtualizing the storage to be used by the nscale Server
+
+## Server Ids
+
+if you use nstlHA, both server must have unique server IDs.
+Since the probaly use the same license file, you can set it via
+```
+nstla:
+    serverId: 4711
+nstlb:
+    serverId: 4712
+```
+to make this work, you **must** have a license without nstl ServerID in it.
+
+## High Availability
+
+*nscale Server Storage Layer* does not support multiple replicas because of configuration restraints. To get HA,
+nplus defines nstl[a-d].
+
+If you want multiple server, just switch the single server *nstl* off and turn on *nstla* and *nstlb* [..] and configure them individually. You will find individual config directories on the `conf` shared volume for each nstl instance.
+
+## Cluster Service
+
+in HA mode, the Instance Chart deploys a cluster service that balances across nstl A and B.
+You **can** use it if you want, or you use the services for nstla and nstlb and load balance via nappl.
+Both is ok, it just uses different load balancers.
+
+## Remote Servers
+
+If you want to connect to nscale Storage Layer servers outside the cluster, you can add the IP Range of those
+server to open the firewall (if used):
+
+```
+nstla:
+  security:
+    cni:
+      nstlIpRange: 89.207.132.170/24
+```
+
+## Accounting
+
+You can enable accouting by setting `accounting: true`. This will create the accounting csv files in *ptemp* under `<instance>/<component>/accounting`.
+
+Additionally, a log forwarder can be implemented to output the accounting log to stdout, so that your log aggregator is able to collect that information and add
+it to whatever tool you use for log monitoring / analysis.
+
+You can *optionally* set the db path, where the logForwarder stores the information which log entry has been collected. If you do not set this, the default value is `logs.db` in the path of the log Pattern (of the `path`value).
+
+Example: (in Instance Chart)
+
+```
+nstl:
+  accounting: true
+  logForwarder:
+    - name: Accounting
+      path: "/opt/ceyoniq/nscale-server/storage-layer/accounting/*.csv"
+      db: "/opt/ceyoniq/nscale-server/storage-layer/logsdb/logs.db"
+```
+
+## The DA_HID.DAT
+
+the *nscale Server Storage Layer* offers a safety net, storing the latest ever assigned highest Document ID into a file called `DA_HID.DAT`.
+This file normally resides next to the Document Administration. However, in a production environment, you want to place this file on a separate disk to build a safety net
+for the case that you restore the DA to a former version so the counter starts assigning a document ID twice. So in *nappl*, you end up having documents with the same storage layer doc id.
+
+This must not happen, so a good practise is to store the `DA_HID.DAT` on a second disk and have the nstl check it during startup.
+This is not the default, as it would not make a lot of sense until you really have a second disk.
+
+To switch this on, you can place the hid file on the secondary disk (like in the example below). The path is mounted by default. Just set it and turn it on like this:
+
+```yaml
+# -- enables checking the highest DocID when starting the server.
+# this only makes sense, if you also set a separate volume for the highest ID
+# This is a backup / restore feature to avoid data mangling
+checkHighestDocId: "1"
+# -- sets the path of the highest ID file.
+dvCheckPath: "/opt/ceyoniq/nscale-server/storage-layer/hid"
+```
+
+## Updating from Releases < 9.3 to 9.3
+
+With version 9.3, nplus introduces a new *disk* volume, to separate the *arc Buffer* and the *retrieval Buffer* from the *data* volume that holds the *DA*. This is necessary, as under heavy load it may result in performance loss because some cloud providers have iop limitations on volumes.
+
+To make sure we stay compatible though, there is a new init container that copies the buffers from the old location on *data* over to the new location on *disk*.
+
+Please make sure, you set the size, class and optionally the volumeName (in case of static volumes) according to your requirements.
+
+## nplus-component-nstl Chart Configuration
+
+You can customize / configure nplus-component-nstl by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+accounting | sets and enables / disables the accounting function. If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`) The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths` |   |
+checkHighestDocId | enables checking the highest DocID when starting the server. this only makes sense, if you also set a separate volume for the highest ID This is a backup / restore feature to avoid data mangling |   |
+dvCheckPath | sets the path of the highest ID file. |   |
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"storage-layer"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+logForwarder |  |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"cpp"` |
+**meta**&#8203;.ports&#8203;.tcp | A potential tcp port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `3005` |
+**meta**&#8203;.ports&#8203;.tcps | A potential tls / tcps port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `3006` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"storage-layer"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"nstl"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.paths | Sets the path to the certs folder. <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-server/storage-layer/etc/CA.CER"]` |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-server/storage-layer/etc"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.paths | Sets a list of paths to the data files <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-server/storage-layer/da", "/opt/ceyoniq/nscale-server/storage-layer/hd", "/opt/ceyoniq/nscale-server/storage-layer/logsdb"]` |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |  `"50Gi"` |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.paths | Sets a list of paths to the data files <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-server/storage-layer/arc", "/opt/ceyoniq/nscale-server/storage-layer/ret", "/opt/ceyoniq/nscale-server/storage-layer/hid"]` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |  `"50Gi"` |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.license&#8203;.path | Sets the path to the license files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-server/storage-layer/etc/license.xml"` |
+**mounts**&#8203;.logs&#8203;.medium | the medium for the emptyDisk volume if you unset it, it drops it from the manifest |   |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |  `"5Gi"` |
+**mounts**&#8203;.ptemp&#8203;.paths | Sets a list of paths for temporary files that are persisted <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-server/storage-layer/accounting", "/opt/ceyoniq/nscale-server/storage-layer/log", "/var/crash"]` |
+**mounts**&#8203;.temp&#8203;.paths | Sets a list of paths to the temporary files <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-server/storage-layer/tmp"]` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"500Mi"` |
+nameOverride | This overrides the output of the internal name function |   |
+nodeSelector | select specific nodes for this component |   |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.cni&#8203;.nstlIpRange | You might want to access storage layer outside the cluster (proxy concept) To do so, you can add a specific IP Range here, which is set within the  network policy. |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+
diff --git a/charts/nstl/templates/NOTES.txt b/charts/nstl/templates/NOTES.txt
new file mode 100644
index 0000000..69429f5
--- /dev/null
+++ b/charts/nstl/templates/NOTES.txt
@@ -0,0 +1,8 @@
+{{ .component.chartName }} {{ .Chart.Version }} {{- if .Chart.AppVersion }} / {{ .Chart.AppVersion }}{{- end }}
+
+{{ .Chart.Description }}
+
+This chart uses {{ .Values.image }}
+
+To uninstall, use
+   helm uninstall {{ include "nplus.cli" . }}
diff --git a/charts/nstl/templates/clusterservice.tpl b/charts/nstl/templates/clusterservice.tpl
new file mode 100644
index 0000000..fe87850
--- /dev/null
+++ b/charts/nstl/templates/clusterservice.tpl
@@ -0,0 +1,32 @@
+{{- include "nplus.init" $ -}}
+{{- $name := (print .component.prefix "nstl-cluster") -}}
+{{- if (.Values.clusterService).enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ $name }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+  type: ClusterIP
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  sessionAffinity: ClientIP
+  sessionAffinityConfig:
+    clientIP:
+      timeoutSeconds: 1800
+{{- else }}
+# kind: Service
+# Not Generating any Service for {{ $name }} as the Cluster Service is not enabled on component {{ .component.fullName }}
+# clusterService: {{ .Values.clusterService }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/nstl/templates/component.tpl b/charts/nstl/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/nstl/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/nstl/templates/networkpolicy.tpl b/charts/nstl/templates/networkpolicy.tpl
new file mode 100644
index 0000000..91b25c3
--- /dev/null
+++ b/charts/nstl/templates/networkpolicy.tpl
@@ -0,0 +1,58 @@
+{{- include "nplus.init" $ -}}
+
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+  policyTypes:
+  - Ingress
+  - Egress
+  ingress:
+  - from:
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: core
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+
+  {{- include "nplus.networkpolicy.allowFromAdmin" . | nindent 2 }}
+  {{- include "nplus.networkpolicy.allowFromMon" . | nindent 2 }}
+
+  egress:
+
+  #
+  # access to other storage-layer in the same instance
+  #
+  - to:
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: nstl
+
+  {{- if ((.this.security).cni).nstlIpRange }}
+  #
+  # Allow access to out-of-cluster Storage Layer
+  #
+  - to:
+    - ipBlock:
+        cidr: {{ .this.security.cni.nstlIpRange | quote }}
+  {{- end }}
+
+{{- end }}
\ No newline at end of file
diff --git a/charts/nstl/templates/pdb.tpl b/charts/nstl/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/nstl/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/nstl/templates/pvc.tpl b/charts/nstl/templates/pvc.tpl
new file mode 100644
index 0000000..b7ac9a2
--- /dev/null
+++ b/charts/nstl/templates/pvc.tpl
@@ -0,0 +1 @@
+{{- include "nplus.pvc" . }}
diff --git a/charts/nstl/templates/sanity.tpl b/charts/nstl/templates/sanity.tpl
new file mode 100644
index 0000000..f1c544e
--- /dev/null
+++ b/charts/nstl/templates/sanity.tpl
@@ -0,0 +1,3 @@
+{{- if ne (.Values.replicaCount | int) 1 -}}
+{{- fail "nstl replicaCount must be 1. If you want HA, go for nstlHA instead" -}}
+{{- end -}}
diff --git a/charts/nstl/templates/service.tpl b/charts/nstl/templates/service.tpl
new file mode 100644
index 0000000..f89ad2a
--- /dev/null
+++ b/charts/nstl/templates/service.tpl
@@ -0,0 +1,29 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+
+  type: ClusterIP
+
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
+
diff --git a/charts/nstl/templates/statefulset.tpl b/charts/nstl/templates/statefulset.tpl
new file mode 100644
index 0000000..78ee775
--- /dev/null
+++ b/charts/nstl/templates/statefulset.tpl
@@ -0,0 +1,202 @@
+{{- include "nplus.init" $ -}}
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+
+  serviceName: {{ .component.fullName }}
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: {{ .Values.replicaCount }}
+  podManagementPolicy: OrderedReady
+  updateStrategy:
+    type: {{ .Values.updateStrategy | default "OnDelete" }}  
+  minReadySeconds: 5
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+        kubectl.kubernetes.io/default-container: storage-layer
+    spec:
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.templateAffinity" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+
+      {{- if and ((.Values.mounts).disk).enabled ((.Values.mounts).disk).migration }}
+      {{- if or ((.Values.mounts).disk).path ((.Values.mounts).disk).paths }}
+      #TODO: Das könnte man auch noch dynamischer machen.
+      - name: migration
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        {{- include "nplus.initResources" . | nindent 8 }}
+
+        command: [ "/bin/sh", "-c" ]
+        args:
+        - |
+          set -e
+          if [ -z "$( ls -A '/mnt/arc_old' )" ]; then
+            echo "No arc migration necessary"
+          else
+            if [ -f "/mnt/arc_old/.migrated" ]; then
+              echo "Content of arc already migrated to new location on disk. .migrated file found on old location."
+            else
+              echo "Copying content of arc on data to new location on disk (without overwriting files)"
+              cp -rnxv /mnt/arc_old/* /mnt/arc_new/
+              echo "Writing .migrated file to prevent re-migration"
+              echo "migrated" > /mnt/arc_old/.migrated
+            fi
+          fi
+          if [ -z "$( ls -A '/mnt/ret_old' )" ]; then
+            echo "No ret migration necessary"
+          else
+            if [ -f "/mnt/ret_old/.migrated" ]; then
+              echo "Content of ret already migrated to new location on disk. .migrated file found on old location."
+            else
+              echo "Copying content of ret on data to new location on disk (without overwriting files)"
+              cp -rnxv /mnt/ret_old/* /mnt/ret_new/
+              echo "Writing .migrated file to prevent re-migration"
+              echo "migrated" > /mnt/ret_old/.migrated
+            fi
+          fi
+          echo "done."
+        volumeMounts:
+        - name: data
+          subPath: arc
+          mountPath: /mnt/arc_old
+        - name: disk
+          subPath: arc
+          mountPath: /mnt/arc_new
+        - name: data
+          subPath: ret
+          mountPath: /mnt/ret_old
+        - name: disk
+          subPath: ret
+          mountPath: /mnt/ret_new
+      {{- end }}{{/* disk mount definition */}}
+      {{- end }}{{/* Migration and Disk enabled */}}
+
+      {{- if .this.dvCheckPath }}
+      - name: copy-hid
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        {{- include "nplus.initResources" . | nindent 8 }}
+
+        command: [ "/bin/sh", "-c" ]
+        args:
+        - |
+          set -e
+          echo "Checking for DA_HID.DAT in {{ .this.dvCheckPath }}"
+          if [ -f "{{ .this.dvCheckPath }}/DA_HID.DAT" ]; then
+            echo "{{ .this.dvCheckPath }}/DA_HID.DAT found"
+          else
+            echo "{{ .this.dvCheckPath }}/DA_HID.DAT not found, trying to copy from etc"
+            if [ -f "/opt/ceyoniq/nscale-server/storage-layer/etc/DA_HID.DAT" ]; then
+              echo "/opt/ceyoniq/nscale-server/storage-layer/etc/DA_HID.DAT found"
+              echo "copying it"
+              cp -n /opt/ceyoniq/nscale-server/storage-layer/etc/DA_HID.DAT {{ .this.dvCheckPath }}/DA_HID.DAT
+            else
+              echo "/opt/ceyoniq/nscale-server/storage-layer/etc/DA_HID.DAT not found"
+            fi
+          fi
+          echo "done."
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+      {{- end }}
+
+      containers:
+      {{- include "nplus.logForwarder" . | nindent 6 }}
+      - name: storage-layer
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+          # - name: NSTL_INTERFACE_SSLINTERFACE
+          #   value: "1"
+          - name: LOG_APPENDER
+            value: "Console"
+          - name: NSTL_STORAGE-LAYER_LOGLEVEL
+            value: "4"
+          {{- if .this.dvCheckPath }}
+          - name: NSTL_STORAGE-LAYER_DVCHECKPATH
+            value: "{{ .this.dvCheckPath }}"
+          {{- end }}
+          {{- if .this.checkHighestDocId }}
+          - name: NSTL_STORAGE-LAYER_CHECKHIGHESTDOCID
+            value: "{{ .this.checkHighestDocId }}"
+          {{- end }}
+          {{- if .Values.serverID }}
+          - name: NSTL_STORAGE-LAYER_SERVERID
+            value: "{{ .Values.serverID }}"
+          {{- end }}
+          {{- if .this.accounting }}
+          - name: NSTL_ACCOUNTING_ACTIVE
+            value: "1"
+          # This is the base path. In this directory, accounting will create a folder
+          # accounting if not present and publish the csv files there.
+          - name: NSTL_ACCOUNTING_BASEPATH
+            value: "/opt/ceyoniq/nscale-server/storage-layer"
+          {{- end }}
+
+        {{- include "nplus.environment" . | nindent 8 }}
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+        startupProbe:
+          tcpSocket:
+            port: tcp
+          initialDelaySeconds: 5
+          failureThreshold: 30
+          periodSeconds: 10
+          timeoutSeconds: 5
+        # -- Ceyoniq does currently not define an *official* livenessProbe, so we use
+        # one that quickly checks the main socket on Layer 4.
+        livenessProbe:
+          tcpSocket:
+            port: tcp
+          # initialDelaySeconds: 10
+          periodSeconds: 10
+        readinessProbe:
+          exec:
+            command:
+            - /opt/ceyoniq/nscale-server/storage-layer/bin/cstool
+            - srv
+            - -m1
+            - -c
+            - sock
+          # initialDelaySeconds: 1
+          failureThreshold: 1
+        {{- end }}
+
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
diff --git a/charts/nstl/values.schema.json b/charts/nstl/values.schema.json
new file mode 100644
index 0000000..9ae8064
--- /dev/null
+++ b/charts/nstl/values.schema.json
@@ -0,0 +1,775 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "accounting": {
+      "default": "",
+      "description": "sets and enables / disables the accounting function. If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`) The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths`",
+      "title": "accounting"
+    },
+    "checkHighestDocId": {
+      "default": "",
+      "description": "enables checking the highest DocID when starting the server. this only makes sense, if you also set a separate volume for the highest ID This is a backup / restore feature to avoid data mangling",
+      "title": "checkHighestDocId"
+    },
+    "dvCheckPath": {
+      "default": "",
+      "description": "sets the path of the highest ID file.",
+      "title": "dvCheckPath"
+    },
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "storage-layer",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.3.1201.2024112518",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "ingress settings. however, the nstl does not use http, so a layer 7 LB does not make any sense. @ignore",
+      "properties": {
+        "enabled": {
+          "default": "false",
+          "description": "enables ingress on this component do not change this! @ignore",
+          "title": "enabled"
+        }
+      },
+      "title": "ingress"
+    },
+    "logForwarder": {
+      "default": "",
+      "title": "logForwarder",
+      "type": "null"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "cpp",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "3005",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "3006",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "storage-layer",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "nstl",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta",
+      "type": "object"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-server/storage-layer/etc",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "50Gi",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "50Gi",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-server/storage-layer/etc/license.xml",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "medium": {
+              "default": "",
+              "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+              "title": "medium"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "5Gi",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "500Mi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "cni": {
+          "additionalProperties": false,
+          "properties": {
+            "nstlIpRange": {
+              "default": "",
+              "description": "You might want to access storage layer outside the cluster (proxy concept) To do so, you can add a specific IP Range here, which is set within the  network policy.",
+              "title": "nstlIpRange"
+            }
+          },
+          "title": "cni",
+          "type": "object"
+        },
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsNonRoot": {
+              "default": true,
+              "title": "runAsNonRoot",
+              "type": "boolean"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/nstl/values.yaml b/charts/nstl/values.yaml
new file mode 100644
index 0000000..a829ac7
--- /dev/null
+++ b/charts/nstl/values.yaml
@@ -0,0 +1,421 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+    runAsNonRoot: true
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  cni:
+    # -- You might want to access storage layer outside the cluster (proxy concept)
+    # To do so, you can add a specific IP Range here, which is set within the 
+    # network policy.
+    nstlIpRange:
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/nscale-server/storage-layer/tmp"
+    # -- Sets the size of the temporary disk (all paths)
+    size: "500Mi"
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-server/storage-layer/etc"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size: "5Gi"
+    # -- the medium for the emptyDisk volume
+    # if you unset it, it drops it from the manifest
+    medium:
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-server/storage-layer/etc/license.xml"
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/nscale-server/storage-layer/etc/CA.CER"
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- Sets the size of the data disk
+    size: "50Gi"
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/nscale-server/storage-layer/da"
+      - "/opt/ceyoniq/nscale-server/storage-layer/hd"
+      - "/opt/ceyoniq/nscale-server/storage-layer/logsdb"
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+  disk:
+    # -- Sets the size of the disk
+    size: "50Gi"
+    # -- Sets the class of the disk
+    class:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/nscale-server/storage-layer/arc"
+      - "/opt/ceyoniq/nscale-server/storage-layer/ret"
+      - "/opt/ceyoniq/nscale-server/storage-layer/hid"
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+  file:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/nscale-server/storage-layer/accounting"
+      - "/opt/ceyoniq/nscale-server/storage-layer/log"
+      - "/var/crash"
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: storage-layer
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: nstl
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http:
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https:
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp: 3005
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps: 3006
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: cpp
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: storage-layer
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- the replicaCount for the Storage Layer. This does not make sense, so
+# leave this at 1 at any time, unless you know exactly what you are doing.
+# @ignore
+replicaCount: 1
+# -- ingress settings.
+# however, the nstl does not use http, so a layer 7 LB
+# does not make any sense.
+# @ignore
+ingress:
+  # -- enables ingress on this component
+  # do not change this!
+  # @ignore
+  enabled: false
+# -- enables checking the highest DocID when starting the server.
+# this only makes sense, if you also set a separate volume for the highest ID
+# This is a backup / restore feature to avoid data mangling
+checkHighestDocId:
+# -- sets the path of the highest ID file.
+dvCheckPath:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# --  sets and enables / disables the accounting function.
+# If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`)
+# The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths`
+accounting:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+logForwarder:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/pam/Chart.yaml b/charts/pam/Chart.yaml
new file mode 100644
index 0000000..770db0d
--- /dev/null
+++ b/charts/pam/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-pam
+description: nscale Process Automation Modeler, providing Web UI Modeler for PAP
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/pam/README.md b/charts/pam/README.md
new file mode 100644
index 0000000..3a98b0d
--- /dev/null
+++ b/charts/pam/README.md
@@ -0,0 +1,175 @@
+
+
+# nplus-component-pam
+
+nscale Process Automation Modeler, providing Web UI Modeler for PAP
+
+## nplus-component-pam Chart Configuration
+
+You can customize / configure nplus-component-pam by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"process-automation-modeler"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/modeler"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**javaOpts**&#8203;.javaMaxMem | set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed |   |
+**javaOpts**&#8203;.javaMaxRamPercentage | set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any. |   |
+**javaOpts**&#8203;.javaMinMem | set the minimum memory, java will consume |   |
+**javaOpts**&#8203;.javaMisc | Any misc Java Options that need to be passed to the container |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"java"` |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8092` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"pam"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"pam"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-server/process-automation-modeler/conf"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.logs&#8203;.path | Sets the path to the log files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-server/process-automation-modeler/apache/logs"` |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |  `"1Gi"` |
+**mounts**&#8203;.temp&#8203;.paths | Sets a list of paths to the temporary files <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-server/process-automation-modeler/apache/webapps", "/opt/ceyoniq/nscale-server/process-automation-modeler/apache/temp", "/opt/ceyoniq/nscale-server/process-automation-modeler/apache/work/Catalina/localhost"]` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"1Gi"` |
+nameOverride | This overrides the output of the internal name function |   |
+**nappl**&#8203;.account | The technical account to login with |   |
+**nappl**&#8203;.domain | The domain of the technical account |   |
+**nappl**&#8203;.host | nappl host name |   |
+**nappl**&#8203;.instance | instance of the Application Layer, likely `instance1` |   |
+**nappl**&#8203;.password | The password of the technical accunt (if not set by secret) |   |
+**nappl**&#8203;.port | nappl port (http 8080 or https 8443) |   |
+**nappl**&#8203;.secret | An optional secret that holds the credentials (the keys must be `account` and `password`) |   |
+**nappl**&#8203;.ssl | sets the Advanced Connect to tls |   |
+nodeSelector | select specific nodes for this component |   |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+
diff --git a/charts/pam/templates/component.tpl b/charts/pam/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/pam/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/pam/templates/ingress.tpl b/charts/pam/templates/ingress.tpl
new file mode 100644
index 0000000..293d27f
--- /dev/null
+++ b/charts/pam/templates/ingress.tpl
@@ -0,0 +1,16 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/pam/templates/networkpolicy.tpl b/charts/pam/templates/networkpolicy.tpl
new file mode 100644
index 0000000..1c5c861
--- /dev/null
+++ b/charts/pam/templates/networkpolicy.tpl
@@ -0,0 +1,41 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+
+  policyTypes:
+  - Ingress
+  - Egress
+
+  ingress:
+
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+
+  {{- include "nplus.networkpolicy.allowFromAdmin" . | nindent 2 }}
+  {{- include "nplus.networkpolicy.allowFromMon" . | nindent 2 }}
+
+  egress:
+  - to:
+    # Allow Access to nappl and nappljobs
+    - podSelector:
+        matchLabels:
+          nplus/type: core
+          nplus/group: {{ .instance.group }}
+{{- end }}
diff --git a/charts/pam/templates/pdb.tpl b/charts/pam/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/pam/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/pam/templates/pvc.tpl b/charts/pam/templates/pvc.tpl
new file mode 100644
index 0000000..b79132a
--- /dev/null
+++ b/charts/pam/templates/pvc.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.pvc" . }}
diff --git a/charts/pam/templates/service.tpl b/charts/pam/templates/service.tpl
new file mode 100644
index 0000000..624ee1a
--- /dev/null
+++ b/charts/pam/templates/service.tpl
@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service,
+  # access is purely through an ingress if desired.
+  type: ClusterIP
+  clusterIP: None
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
+
diff --git a/charts/pam/templates/statefulset.tpl b/charts/pam/templates/statefulset.tpl
new file mode 100644
index 0000000..e5c3102
--- /dev/null
+++ b/charts/pam/templates/statefulset.tpl
@@ -0,0 +1,119 @@
+{{- include "nplus.init" $ -}}
+# Component: {{ .component.chartName }}
+# will connect to:
+{{- if (.this.nappl).host }}
+#   nappl: {{ if ($.this.nappl).ssl -}}https{{- else -}}http{{- end -}}://{{ ($.this.nappl).host }}:{{ (.this.nappl).port }}/{{ (.this.nappl).instance }}
+{{- else }}
+#   defined by config file in conf PV.
+{{- end }}
+#
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+
+spec:
+  serviceName: {{ .component.fullName }}
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  {{- if not .Values.autoScale }}
+  replicas: {{ .Values.replicaCount }}
+  {{- end }}
+  podManagementPolicy: OrderedReady
+  updateStrategy:
+    type: {{ .Values.updateStrategy | default "OnDelete" }}  
+  minReadySeconds: 5
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.templateAffinity" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+      
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+
+      containers:
+      - name: pam
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+
+          {{- if ($.this.nappl).host }}
+          - name: NSCALE_HOST
+            value: {{ ($.this.nappl).host | quote }}
+          {{- end }}
+          {{- if ($.this.nappl).port }}
+          - name: NSCALE_PORT
+            value: {{ ($.this.nappl).port | quote }}
+          {{- end }}
+          {{- if ($.this.nappl).ssl }}
+          - name: NSCALE_SSL
+            value: {{ ($.this.nappl).ssl | quote }}
+          {{- end }}
+          {{- if ($.this.nappl).instance }}
+          - name: NSCALE_INSTANCE
+            value: {{ ($.this.nappl).instance | quote }}
+          {{- end }}
+
+        {{- include "nplus.environment" . | nindent 8 }}
+
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+        startupProbe:
+          httpGet:
+            path: /modeler
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          initialDelaySeconds: 30
+          failureThreshold: 12
+          periodSeconds: 10
+          timeoutSeconds: 5
+        readinessProbe:
+          httpGet:
+            path: /modeler
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          periodSeconds: 10
+          timeoutSeconds: 1
+        # -- Ceyoniq does currently not define an *official* livenessProbe, so we use
+        # one that quickly checks the main socket on Layer 4.
+        livenessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          # initialDelaySeconds: 20
+          periodSeconds: 10
+        {{- end }}
+        
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+
diff --git a/charts/pam/values.schema.json b/charts/pam/values.schema.json
new file mode 100644
index 0000000..cce2e21
--- /dev/null
+++ b/charts/pam/values.schema.json
@@ -0,0 +1,846 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "process-automation-modeler",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullPolicy": {
+          "default": "IfNotPresent",
+          "title": "pullPolicy",
+          "type": "string"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.3.1200.63696",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/modeler",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "javaOpts": {
+      "additionalProperties": false,
+      "description": "Options for the Java VM",
+      "properties": {
+        "javaMaxMem": {
+          "default": "",
+          "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+          "title": "javaMaxMem"
+        },
+        "javaMaxRamPercentage": {
+          "default": "",
+          "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+          "title": "javaMaxRamPercentage"
+        },
+        "javaMinMem": {
+          "default": "",
+          "description": "set the minimum memory, java will consume",
+          "title": "javaMinMem"
+        },
+        "javaMisc": {
+          "default": "",
+          "description": "Any misc Java Options that need to be passed to the container",
+          "title": "javaMisc"
+        }
+      },
+      "title": "javaOpts"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "description": "defines internal constants for nplus. do not change these values",
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "java",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8092",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "pam",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "pam",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-server/process-automation-modeler/conf",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-server/process-automation-modeler/apache/logs",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nappl": {
+      "additionalProperties": false,
+      "description": "The nscale Application Layer, this component should talk to",
+      "properties": {
+        "account": {
+          "default": "",
+          "description": "The technical account to login with",
+          "title": "account"
+        },
+        "domain": {
+          "default": "",
+          "description": "The domain of the technical account",
+          "title": "domain"
+        },
+        "host": {
+          "default": "",
+          "description": "nappl host name",
+          "title": "host"
+        },
+        "instance": {
+          "default": "",
+          "description": "instance of the Application Layer, likely `instance1`",
+          "title": "instance"
+        },
+        "password": {
+          "default": "",
+          "description": "The password of the technical accunt (if not set by secret)",
+          "title": "password"
+        },
+        "port": {
+          "default": "",
+          "description": "nappl port (http 8080 or https 8443)",
+          "title": "port"
+        },
+        "secret": {
+          "default": "",
+          "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+          "title": "secret"
+        },
+        "ssl": {
+          "default": "",
+          "description": "sets the Advanced Connect to tls",
+          "title": "ssl"
+        }
+      },
+      "title": "nappl"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "As this is a Admin component, there is no HA or anything so we stick to exactly 1 replica. @ignore -- Fix Value",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/pam/values.yaml b/charts/pam/values.yaml
new file mode 100644
index 0000000..41c4399
--- /dev/null
+++ b/charts/pam/values.yaml
@@ -0,0 +1,419 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: true
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/modeler"
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/nscale-server/process-automation-modeler/apache/webapps"
+      - "/opt/ceyoniq/nscale-server/process-automation-modeler/apache/temp"
+      - "/opt/ceyoniq/nscale-server/process-automation-modeler/apache/work/Catalina/localhost"
+    # -- Sets the size of the temporary disk (all paths)
+    size: "1Gi"
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-server/process-automation-modeler/conf"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-server/process-automation-modeler/apache/logs"
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size: "1Gi"
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path:
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+  file:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- Options for the Java VM
+javaOpts:
+  # -- set the percentage of RAM, Java will use of the total.
+  # The total amount is the amount installed in the K8s Cluster Node,
+  # OR the Memory Limit set (see resources), if any.
+  javaMaxRamPercentage:
+  # -- set the minimum memory, java will consume
+  javaMinMem:
+  # -- set the maximum memory, java will consume.
+  # Attention: This is NOT the real maximum and it does not include any non Java memory.
+  # Please read google, as this is highly discussed
+  javaMaxMem:
+  # -- Any misc Java Options that need to be passed to the container
+  javaMisc:
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: process-automation-modeler
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+  pullPolicy: IfNotPresent
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- defines internal constants for nplus.
+# do not change these values
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: pam
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8092
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https:
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: java
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: pam
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- As this is a Admin component, there is no HA or anything so we stick to exactly 1 replica.
+# @ignore -- Fix Value
+replicaCount: 1
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- The nscale Application Layer, this component should talk to
+nappl:
+  # -- nappl host name
+  host:
+  # -- nappl port (http 8080 or https 8443)
+  port:
+  # -- sets the Advanced Connect to tls
+  ssl:
+  # -- instance of the Application Layer, likely `instance1`
+  instance:
+  # -- The technical account to login with
+  account:
+  # -- The domain of the technical account
+  domain:
+  # -- The password of the technical accunt (if not set by secret)
+  password:
+  # -- An optional secret that holds the credentials (the keys must be `account` and `password`)
+  secret:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/pipeliner/Chart.yaml b/charts/pipeliner/Chart.yaml
new file mode 100644
index 0000000..8a999cc
--- /dev/null
+++ b/charts/pipeliner/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-pipeliner
+description: nscale Pipeliner, the mass import / export tool of nscale
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/pipeliner/README.md b/charts/pipeliner/README.md
new file mode 100644
index 0000000..a8bdd2e
--- /dev/null
+++ b/charts/pipeliner/README.md
@@ -0,0 +1,171 @@
+
+
+# nplus-component-pipeliner
+
+nscale Pipeliner, the mass import / export tool of nscale
+
+## nplus-component-pipeliner Chart Configuration
+
+You can customize / configure nplus-component-pipeliner by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+**dav**&#8203;.account | the dav user |  `"pipeliner"` |
+**dav**&#8203;.image&#8203;.pullPolicy | the DAV server image pull policy |  `"IfNotPresent"` |
+**dav**&#8203;.password | password of the dav user |  `"pipeliner"` |
+**dav**&#8203;.secret | Alternatively, define a secret |   |
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"pipeliner"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/{{ .component.name }}"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"cpp"` |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8080` |
+**meta**&#8203;.ports&#8203;.tcp | A potential tcp port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `4173` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"pipeliner"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"pipeliner"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-pipeliner/workdir"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.paths | Sets a list of paths to the data files <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-pipeliner/workdir/data"]` |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |  `"10Gi"` |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.defaultConfig | Sets a configMap with default configuration files that get copied to a new and empty container just before the template folder gets copied. Existing files are not overwritten. |  `"{{ .component.fullName }}-defaultconfig"` |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.license&#8203;.path | Sets the path to the license files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-pipeliner/workdir/license.xml"` |
+**mounts**&#8203;.logs&#8203;.path | Sets the path to the log files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-pipeliner/workdir/log"` |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |   |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |   |
+nameOverride | This overrides the output of the internal name function |   |
+nodeSelector | select specific nodes for this component |   |
+replicaCount | Default ReplicaCount is 0 as the pipeliner requires a working cold.xml |  `0` |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+
diff --git a/charts/pipeliner/templates/component.tpl b/charts/pipeliner/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/pipeliner/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/pipeliner/templates/defaultconfig.tpl b/charts/pipeliner/templates/defaultconfig.tpl
new file mode 100644
index 0000000..24601f9
--- /dev/null
+++ b/charts/pipeliner/templates/defaultconfig.tpl
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ .component.fullName }}-defaultconfig
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+data:
+{{- range $path, $bytes := .Files.Glob "defaultconfig/*" }}
+{{- base $path | nindent 2 }}: |
+{{- tpl ($.Files.Get $path) $ | nindent 4 }}
+{{- end }}
diff --git a/charts/pipeliner/templates/ingress.tpl b/charts/pipeliner/templates/ingress.tpl
new file mode 100644
index 0000000..566199e
--- /dev/null
+++ b/charts/pipeliner/templates/ingress.tpl
@@ -0,0 +1,16 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ .Values.ingress.backendProtocol | default "http" }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/pipeliner/templates/networkpolicy.tpl b/charts/pipeliner/templates/networkpolicy.tpl
new file mode 100644
index 0000000..4fa4d96
--- /dev/null
+++ b/charts/pipeliner/templates/networkpolicy.tpl
@@ -0,0 +1,69 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+
+  policyTypes:
+  - Ingress
+  - Egress
+
+  ingress:
+
+  # This is for the WebDAV Service
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+
+  - from:
+    # access from nappl core in the same instance to setup a cluster
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: core
+    ports:
+    {{- include "nplus.napplClusterPolicyPorts" . | nindent 4 }}
+
+  {{- include "nplus.networkpolicy.allowFromAdmin" . | nindent 2 }}
+  {{- include "nplus.networkpolicy.allowFromMon" . | nindent 2 }}
+
+
+  egress:
+  - to:
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: database
+  - to:
+    # access to application-layer in the same instance to setup a cluster
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: core
+  - to:
+    # access to storage-layer in the same instance
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: nstl
+  - to:
+    # access to rendition-server in the same namespace
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: rs
+{{- end }}
\ No newline at end of file
diff --git a/charts/pipeliner/templates/pdb.tpl b/charts/pipeliner/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/pipeliner/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/pipeliner/templates/pvc.tpl b/charts/pipeliner/templates/pvc.tpl
new file mode 100644
index 0000000..b7ac9a2
--- /dev/null
+++ b/charts/pipeliner/templates/pvc.tpl
@@ -0,0 +1 @@
+{{- include "nplus.pvc" . }}
diff --git a/charts/pipeliner/templates/service.tpl b/charts/pipeliner/templates/service.tpl
new file mode 100644
index 0000000..f05a9a0
--- /dev/null
+++ b/charts/pipeliner/templates/service.tpl
@@ -0,0 +1,32 @@
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service.
+  # It is purely used to collect the EndPointSlices
+  type: ClusterIP
+  clusterIP: None
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
+
diff --git a/charts/pipeliner/templates/statefulset.tpl b/charts/pipeliner/templates/statefulset.tpl
new file mode 100644
index 0000000..7129329
--- /dev/null
+++ b/charts/pipeliner/templates/statefulset.tpl
@@ -0,0 +1,134 @@
+{{- include "nplus.init" $ -}}
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  serviceName: {{ .component.fullName }}
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: {{ .Values.replicaCount }}
+  podManagementPolicy: OrderedReady
+  updateStrategy:
+    type: {{ .Values.updateStrategy | default "OnDelete" }}  
+  minReadySeconds: 5
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+      
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+
+      containers:
+      - name: pipeliner
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+        {{- include "nplus.environment" . | nindent 8 }}
+
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+        startupProbe:
+          exec:
+            command:
+            - "java"
+            - "-jar"
+            - "/opt/ceyoniq/nscale-pipeliner/javalibs/PipelinerCheck.jar"
+            - "localhost"
+            - "4173"
+          initialDelaySeconds: 10
+          failureThreshold: 12
+          periodSeconds: 10
+        readinessProbe:
+          exec:
+            command:
+            - "java"
+            - "-jar"
+            - "/opt/ceyoniq/nscale-pipeliner/javalibs/PipelinerCheck.jar"
+            - "localhost"
+            - "4173"
+          periodSeconds: 30
+          timeoutSeconds: 3
+        # -- Ceyoniq does currently not define an *official* livenessProbe, so we use
+        # one that quickly checks the main socket on Layer 4.
+        livenessProbe:
+          tcpSocket:
+            port: tcp
+          # initialDelaySeconds: 20
+          periodSeconds: 10
+        {{- end }}
+
+        ports:
+        - containerPort: {{ required "Pipeliner tcp port must be set" ((.this.meta).ports).tcp }}
+          name: tcp
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+      {{- if .Values.dav }}
+      - name: {{ .Release.Namespace }}-nplus-webdav-container
+        image: {{ include "nplus.image" (dict "global" .Values.global "image" .Values.dav.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.dav.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        {{- include "nplus.sidecarResources" . | nindent 8 }}
+
+        command: [ "/nplus/davserver" ]
+
+        volumeMounts:
+        - name: data
+          mountPath: "/webdav"
+          subPath: {{ .component.storagePath | quote }}
+
+        env:
+        # -- DAV Connection Credentials
+          {{- include "nplus.envCredentials" (list
+            "DAV_USER"      ($.this.dav).account
+            "DAV_PASSWORD"  ($.this.dav).password
+                            ($.this.dav).secret
+          ) | nindent 10 }}
+
+          - name: DAV_ROOT
+            value: "/{{ .component.name }}"
+
+        ports:
+        {{- if not (.this.security).zeroTrust }}
+        - containerPort: 8080
+          name: http
+        {{- end }}
+
+        readinessProbe:
+          tcpSocket:
+            port: 8080
+          initialDelaySeconds: 15
+          periodSeconds: 10
+
+        {{- end }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+
diff --git a/charts/pipeliner/values.schema.json b/charts/pipeliner/values.schema.json
new file mode 100644
index 0000000..5b7b5ca
--- /dev/null
+++ b/charts/pipeliner/values.schema.json
@@ -0,0 +1,815 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "dav": {
+      "additionalProperties": false,
+      "properties": {
+        "account": {
+          "default": "pipeliner",
+          "description": "the dav user",
+          "title": "account"
+        },
+        "image": {
+          "additionalProperties": false,
+          "description": "the Image to use for the DAV server",
+          "properties": {
+            "name": {
+              "default": "toolbox2",
+              "title": "name",
+              "type": "string"
+            },
+            "pullPolicy": {
+              "default": "IfNotPresent",
+              "description": "the DAV server image pull policy",
+              "title": "pullPolicy"
+            },
+            "repo": {
+              "default": "cr.nplus.cloud/subscription",
+              "title": "repo",
+              "type": "string"
+            },
+            "tag": {
+              "default": "1.2.1300",
+              "title": "tag",
+              "type": "string"
+            }
+          },
+          "title": "image"
+        },
+        "password": {
+          "default": "pipeliner",
+          "description": "password of the dav user",
+          "title": "password"
+        },
+        "secret": {
+          "default": "",
+          "description": "Alternatively, define a secret",
+          "title": "secret"
+        }
+      },
+      "title": "dav",
+      "type": "object"
+    },
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "pipeliner",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.3.1300.2024121815",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/{{ .component.name }}",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "description": "defines internal constants for nplus. do not change these values",
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "cpp",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8080",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "4173",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "pipeliner",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "pipeliner",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-pipeliner/workdir",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "10Gi",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "defaultConfig": {
+          "default": "{{ .component.fullName }}-defaultconfig",
+          "description": "Sets a configMap with default configuration files that get copied to a new and empty container just before the template folder gets copied. Existing files are not overwritten.",
+          "title": "defaultConfig"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-pipeliner/workdir/license.xml",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-pipeliner/workdir/log",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "replicaCount": {
+      "default": "0",
+      "description": "Default ReplicaCount is 0 as the pipeliner requires a working cold.xml",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/pipeliner/values.yaml b/charts/pipeliner/values.yaml
new file mode 100644
index 0000000..97c1f9d
--- /dev/null
+++ b/charts/pipeliner/values.yaml
@@ -0,0 +1,401 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: true
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/{{ .component.name }}"
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the temporary disk (all paths)
+    size:
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-pipeliner/workdir"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-pipeliner/workdir/log"
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size:
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-pipeliner/workdir/license.xml"
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- Sets a configMap with default configuration files that get copied
+  # to a new and empty container just before the template folder gets copied.
+  # Existing files are not overwritten.
+  defaultConfig: "{{ .component.fullName }}-defaultconfig"
+  data:
+    # -- Sets the size of the data disk
+    size: "10Gi"
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/nscale-pipeliner/workdir/data"
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+  file:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: pipeliner
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- defines internal constants for nplus.
+# do not change these values
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: pipeliner
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8080 # webdav
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https:
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp: 4173 # for admin and mon
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: cpp
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: pipeliner
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+dav:
+  # -- the Image to use for the DAV server
+  image:
+    repo: cr.nplus.cloud/subscription
+    name: toolbox2
+    tag: "latest"
+    # -- the DAV server image pull policy
+    pullPolicy: IfNotPresent
+  # -- the dav user
+  account: pipeliner
+  # -- password of the dav user
+  password: pipeliner
+  # -- Alternatively, define a secret
+  secret:
+# -- Default ReplicaCount is 0 as the pipeliner requires a working cold.xml
+replicaCount: 0
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/prepper/Chart.yaml b/charts/prepper/Chart.yaml
new file mode 100644
index 0000000..e9a61a4
--- /dev/null
+++ b/charts/prepper/Chart.yaml
@@ -0,0 +1,15 @@
+apiVersion: v2
+name: nplus-prepper
+description: nplus Prepper, used to deploy assets prior to component deployment
+icon: data:image/svg+xml;base64,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
+type: application
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+# It is recommended to use it with quotes.
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/prepper/README.md b/charts/prepper/README.md
new file mode 100644
index 0000000..3eea3d1
--- /dev/null
+++ b/charts/prepper/README.md
@@ -0,0 +1,179 @@
+
+
+# nplus-prepper
+
+nplus Prepper, used to deploy assets prior to component deployment
+
+The *Prepper* prepares everything required for the Instance to work as intended. It is very much like the *Application*, except that it does not connect to any nscale component (as they do not yet run by the time the prepper executes). But just like the Application, the Prepper is able to download assets and run scripts.
+
+You can add this to your (instance-) deployment:
+
+```yaml
+components:
+  prepper: true
+prepper:
+  download:
+    - "https://git.nplus.cloud/public/nplus/raw/branch/master/assets/sample.tar.gz"
+  run:
+    - "/pool/downloads/sample.sh"
+```
+
+This will
+1. download the *sample.tar.gz* file from the git server,
+2. Extract the tar.gz into the downloads folder
+3. Run the contained sample.sh script
+
+If you need to deploy Snippets prior to your *nscale Web* deployment, simply download them from your git, extract and then copy or move them over to your web config folder, that gets mounted by the web client upon pod creation.
+
+## nplus-prepper Chart Configuration
+
+You can customize / configure nplus-prepper by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+download | A list of URLs (Links) to Assets to download before anything else if the download is a .tar.gz, it is automatically untared to /pool/downloads |   |
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"toolbox2"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"cr.nplus.cloud/subscription"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |   |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |   |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"application"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/application"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |   |
+**mounts**&#8203;.pool&#8203;.path | Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution <br>do not change this value | **info only**, do not change<br> `"/pool"` |
+**mounts**&#8203;.temp&#8203;.path | Sets the path to the temporary files <br>do not change this value | **info only**, do not change<br> `"/tmp"` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |   |
+nameOverride | This overrides the output of the internal name function |   |
+**nappl**&#8203;.account | The technical account to login with |   |
+**nappl**&#8203;.domain | The domain of the technical account |   |
+**nappl**&#8203;.host | nappl host name |   |
+**nappl**&#8203;.instance | instance of the Application Layer, likely `instance1` |   |
+**nappl**&#8203;.password | The password of the technical accunt (if not set by secret) |   |
+**nappl**&#8203;.port | nappl port (http 8080 or https 8443) |   |
+**nappl**&#8203;.secret | An optional secret that holds the credentials (the keys must be `account` and `password`) |   |
+**nappl**&#8203;.ssl | sets the Advanced Connect to tls |   |
+nodeSelector | select specific nodes for this component |   |
+**nstl**&#8203;.host | The dns of the *nscale Server Storage Layer*. This is used to add it to the nappl configuration |   |
+prerun | A list of scripts to run before the deployment of Apps |   |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**rs**&#8203;.host | The dns of the *nscale rendition Server*. This is used to add it to the nappl configuration |   |
+run | A list of scripts to run after the deployment of Apps |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+
diff --git a/charts/prepper/templates/application.tpl b/charts/prepper/templates/application.tpl
new file mode 100644
index 0000000..9ce1b1d
--- /dev/null
+++ b/charts/prepper/templates/application.tpl
@@ -0,0 +1,19 @@
+apiVersion: nplus.cloud/v1beta1
+kind: Application
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.annotations" . | nindent 4 }}
+    argocd.argoproj.io/sync-wave: "1"
+spec:
+  download:
+    {{- toYaml .Values.download | nindent 4 }}
+  run:
+    {{- toYaml .Values.run | nindent 4 }}
+  selector:
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
diff --git a/charts/prepper/templates/config.tpl b/charts/prepper/templates/config.tpl
new file mode 100644
index 0000000..18869ce
--- /dev/null
+++ b/charts/prepper/templates/config.tpl
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ .component.fullName }}-config
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+data:
+{{- range $path, $bytes := .Files.Glob "config/*" }}
+{{- base $path | nindent 2 }}: |
+{{- tpl ($.Files.Get $path) $ | nindent 4 }}
+{{- end }}
diff --git a/charts/prepper/templates/job.tpl b/charts/prepper/templates/job.tpl
new file mode 100644
index 0000000..ca70604
--- /dev/null
+++ b/charts/prepper/templates/job.tpl
@@ -0,0 +1,65 @@
+{{- include "nplus.init" $ -}}
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  # Deletion ist done by Operator when successful, so no ttl necessary.
+  # ttlSecondsAfterFinished: 60
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/version: {{ .Chart.AppVersion }}
+        app.kubernetes.io/managed-by: {{ .Release.Service }}
+        app.kubernetes.io/instance: {{ .instance.group | default .instance.name | default .Release.Name }}
+        app.kubernetes.io/component: {{ .component.chartName }}
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+    spec:
+      # hostname: {{ .component.fullName }}
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+      
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+      
+      containers:
+      - name: run
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+        {{- include "nplus.environment" . | nindent 8 }}
+
+        command: ["/bin/bash", "-c", "/config/run"]
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+        - name: config
+          mountPath: /config
+        - name: conf
+          subPath: {{ .this.instance.name }}
+          mountPath: /instance
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+      - name: config
+        configMap:
+          name: {{ .component.fullName }}-config
+          defaultMode: 0777
+
+      restartPolicy: Never
+  backoffLimit: 0
+
diff --git a/charts/prepper/templates/networkpolicy.tpl b/charts/prepper/templates/networkpolicy.tpl
new file mode 100644
index 0000000..f6d9110
--- /dev/null
+++ b/charts/prepper/templates/networkpolicy.tpl
@@ -0,0 +1,38 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+
+  policyTypes:
+  - Egress
+
+  egress:
+  - ports:
+    # -- Allow https access for downloading
+    - protocol: TCP
+      port: 443
+    # -- Allow http access for downloading
+    - protocol: TCP
+      port: 80
+    # -- Allow access to DNS
+    - protocol: TCP
+      port: 53
+    # -- Allow access to DNS
+    - protocol: UDP
+      port: 53
+{{- end }}
\ No newline at end of file
diff --git a/charts/prepper/values.schema.json b/charts/prepper/values.schema.json
new file mode 100644
index 0000000..58f914f
--- /dev/null
+++ b/charts/prepper/values.schema.json
@@ -0,0 +1,720 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "download": {
+      "default": "",
+      "description": "A list of URLs (Links) to Assets to download before anything else if the download is a .tar.gz, it is automatically untared to /pool/downloads",
+      "title": "download"
+    },
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "toolbox2",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "cr.nplus.cloud/subscription",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "1.2.1300",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "application",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta",
+      "type": "object"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/application",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "/pool",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "/tmp",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nappl": {
+      "additionalProperties": false,
+      "description": "The nscale Application Layer, this component should talk to",
+      "properties": {
+        "account": {
+          "default": "",
+          "description": "The technical account to login with",
+          "title": "account"
+        },
+        "domain": {
+          "default": "",
+          "description": "The domain of the technical account",
+          "title": "domain"
+        },
+        "host": {
+          "default": "",
+          "description": "nappl host name",
+          "title": "host"
+        },
+        "instance": {
+          "default": "",
+          "description": "instance of the Application Layer, likely `instance1`",
+          "title": "instance"
+        },
+        "password": {
+          "default": "",
+          "description": "The password of the technical accunt (if not set by secret)",
+          "title": "password"
+        },
+        "port": {
+          "default": "",
+          "description": "nappl port (http 8080 or https 8443)",
+          "title": "port"
+        },
+        "secret": {
+          "default": "",
+          "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+          "title": "secret"
+        },
+        "ssl": {
+          "default": "",
+          "description": "sets the Advanced Connect to tls",
+          "title": "ssl"
+        }
+      },
+      "title": "nappl"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "nstl": {
+      "additionalProperties": false,
+      "properties": {
+        "host": {
+          "default": "",
+          "description": "The dns of the *nscale Server Storage Layer*. This is used to add it to the nappl configuration",
+          "title": "host"
+        }
+      },
+      "title": "nstl",
+      "type": "object"
+    },
+    "prerun": {
+      "default": "",
+      "description": "A list of scripts to run before the deployment of Apps",
+      "title": "prerun"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "rs": {
+      "additionalProperties": false,
+      "properties": {
+        "host": {
+          "default": "",
+          "description": "The dns of the *nscale rendition Server*. This is used to add it to the nappl configuration",
+          "title": "host"
+        }
+      },
+      "title": "rs",
+      "type": "object"
+    },
+    "run": {
+      "default": "",
+      "description": "A list of scripts to run after the deployment of Apps",
+      "title": "run"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/prepper/values.yaml b/charts/prepper/values.yaml
new file mode 100644
index 0000000..1022b4d
--- /dev/null
+++ b/charts/prepper/values.yaml
@@ -0,0 +1,397 @@
+# yaml-language-server: $schema=values.schema.json
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: application
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http:
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https:
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language:
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer:
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+mounts:
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/application"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path: "/pool"
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path: "/tmp"
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the temporary disk (all paths)
+    size:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size:
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path:
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+  file:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- The nscale Application Layer, this component should talk to
+nappl:
+  # -- nappl host name
+  host:
+  # -- nappl port (http 8080 or https 8443)
+  port:
+  # -- sets the Advanced Connect to tls
+  ssl:
+  # -- instance of the Application Layer, likely `instance1`
+  instance:
+  # -- The technical account to login with
+  account:
+  # -- The domain of the technical account
+  domain:
+  # -- The password of the technical accunt (if not set by secret)
+  password:
+  # -- An optional secret that holds the credentials (the keys must be `account` and `password`)
+  secret:
+nstl:
+  # -- The dns of the *nscale Server Storage Layer*. This is used to add it to the nappl configuration
+  host:
+rs:
+  # -- The dns of the *nscale rendition Server*. This is used to add it to the nappl configuration
+  host:
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: toolbox2
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: cr.nplus.cloud/subscription
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+# -- A list of URLs (Links) to Assets to download before anything else
+# if the download is a .tar.gz, it is automatically untared to /pool/downloads
+download:
+# -- A list of scripts to run after the deployment of Apps
+run:
+# -- A list of scripts to run before the deployment of Apps
+prerun:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/rms/Chart.yaml b/charts/rms/Chart.yaml
new file mode 100644
index 0000000..ad0dad7
--- /dev/null
+++ b/charts/rms/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-rms
+description: nplus Remote Management Server incl. RMS and Access Proxy
+icon: data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4KPHN2ZyB2ZXJzaW9uPSIxLjEiIGlkPSJFYmVuZV8xIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB4PSIwcHgiIHk9IjBweCIKCSB2aWV3Qm94PSIwIDAgNTEuMDI0IDUxLjAyNCIgZW5hYmxlLWJhY2tncm91bmQ9Im5ldyAwIDAgNTEuMDI0IDUxLjAyNCIgeG1sOnNwYWNlPSJwcmVzZXJ2ZSI+CjxnPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIzMi4zMjIsMTkuNzQ0IDIwLjY0OSwxOS43NDQgMTguNTkxLDMxLjQxNyAzMC4yNjQsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iNDcuMTg1LDE5Ljc0NCAzNS41MTIsMTkuNzQ0IDMzLjQ1NCwzMS40MTcgNDUuMTI2LDMxLjQxNyAJIi8+Cgk8cG9seWdvbiBmaWxsPSIjQTRCRkU0IiBwb2ludHM9IjI5Ljc2NiwzNC41NTEgMTguMDk0LDM0LjU1MSAxNi4wMzUsNDYuMjI0IDI3LjcwOCw0Ni4yMjQgCSIvPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIxNy41NywxOS43NDQgNS44OTcsMTkuNzQ0IDMuODM5LDMxLjQxNyAxNS41MTIsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iMzUuMTUsNC43OTkgMjMuNDc3LDQuNzk5IDIxLjQxOSwxNi40NzIgMzMuMDkyLDE2LjQ3MiAJIi8+Cjwvc3ZnPgo=
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/rms/README.md b/charts/rms/README.md
new file mode 100644
index 0000000..209609a
--- /dev/null
+++ b/charts/rms/README.md
@@ -0,0 +1,228 @@
+
+
+# nplus-component-rms
+
+nplus Remote Management Server incl. RMS and Access Proxy
+
+## Generelle Informationen
+
+Das RMS Chart simuliert einen Server, auf dem alle nscale Komponenten installiert sind. Dieser kann dann per
+nscale Administrator zugegriffen werden. Der Ingress dafür ist admin.<domain>.
+
+Das funktioniert nur mit RMS 2 und einem neuen Admin ab Version 9.2
+
+## Bash into
+
+```sh
+kubectl exec --stdin --tty rms-rms-0 -- bash
+```
+
+## Logs
+
+```sh
+kubectl logs rms-rms-0 -c proxy
+kubectl logs rms-rms-0 -c rms
+```
+
+## nplus-component-rms Chart Configuration
+
+You can customize / configure nplus-component-rms by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+**comps**&#8203;.cmis&#8203;.displayName | The displayName name of the component as it appears in the RMS Server Properties <br>do not change | **info only**, do not change<br> `"CMIS Connector"` |
+**comps**&#8203;.cmis&#8203;.enabled | Toggles if this component should be available through RMS |  `false` |
+**comps**&#8203;.cmis&#8203;.host | The host, where this component runs |  `"{{ .component.prefix }}cmis.{{ .Release.Namespace }}.svc.cluster.local"` |
+**comps**&#8203;.cmis&#8203;.name | The internal name of the component <br>do not change | **info only**, do not change<br> `"cmis"` |
+**comps**&#8203;.cmis&#8203;.ports&#8203;.http | proxied port <br>do not change | **info only**, do not change<br> `8096` |
+**comps**&#8203;.cmis&#8203;.ports&#8203;.https | proxied port <br>do not change | **info only**, do not change<br> `8196` |
+**comps**&#8203;.cmis&#8203;.replicaSetType | The type of the replicaSet - important for the kubectl command <br>do not change | **info only**, do not change<br> `"Deployment"` |
+**comps**&#8203;.cmis&#8203;.restartReplicas | The amount of replicas to set when starting through the *nscale Administrator* client |  `1` |
+**comps**&#8203;.ilm&#8203;.displayName | The displayName name of the component as it appears in the RMS Server Properties <br>do not change | **info only**, do not change<br> `"SAP ILM Connector"` |
+**comps**&#8203;.ilm&#8203;.enabled | Toggles if this component should be available through RMS |  `false` |
+**comps**&#8203;.ilm&#8203;.host | The host, where this component runs |  `"{{ .component.prefix }}ilm.{{ .Release.Namespace }}.svc.cluster.local"` |
+**comps**&#8203;.ilm&#8203;.name | The internal name of the component <br>do not change | **info only**, do not change<br> `"ilm"` |
+**comps**&#8203;.ilm&#8203;.ports&#8203;.http | proxied port <br>do not change | **info only**, do not change<br> `8297` |
+**comps**&#8203;.ilm&#8203;.ports&#8203;.https | proxied port <br>do not change | **info only**, do not change<br> `8397` |
+**comps**&#8203;.ilm&#8203;.replicaSetType | The type of the replicaSet - important for the kubectl command <br>do not change | **info only**, do not change<br> `"Deployment"` |
+**comps**&#8203;.ilm&#8203;.restartReplicas | The amount of replicas to set when starting through the *nscale Administrator* client |  `1` |
+**comps**&#8203;.mon&#8203;.displayName | The displayName name of the component as it appears in the RMS Server Properties <br>do not change | **info only**, do not change<br> `"Monitoring Console"` |
+**comps**&#8203;.mon&#8203;.enabled | Toggles if this component should be available through RMS |  `false` |
+**comps**&#8203;.mon&#8203;.host | The host, where this component runs |  `"{{ .component.prefix }}mon.{{ .Release.Namespace }}.svc.cluster.local"` |
+**comps**&#8203;.mon&#8203;.name | The internal name of the component <br>do not change | **info only**, do not change<br> `"mon"` |
+**comps**&#8203;.mon&#8203;.ports&#8203;.http | proxied port <br>do not change | **info only**, do not change<br> `8387` |
+**comps**&#8203;.mon&#8203;.ports&#8203;.https | proxied port <br>do not change | **info only**, do not change<br> `8388` |
+**comps**&#8203;.mon&#8203;.ports&#8203;.tcp | proxied port <br>do not change | **info only**, do not change<br> `8389` |
+**comps**&#8203;.mon&#8203;.replicaSetType | The type of the replicaSet - important for the kubectl command <br>do not change | **info only**, do not change<br> `"StatefulSet"` |
+**comps**&#8203;.mon&#8203;.restartReplicas | The amount of replicas to set when starting through the *nscale Administrator* client |  `1` |
+**comps**&#8203;.nappl&#8203;.displayName | The displayName name of the component as it appears in the RMS Server Properties <br>do not change | **info only**, do not change<br> `"Application Layer"` |
+**comps**&#8203;.nappl&#8203;.enabled | Toggles if this component should be available through RMS |  `false` |
+**comps**&#8203;.nappl&#8203;.host | The host, where this component runs |  `"{{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local"` |
+**comps**&#8203;.nappl&#8203;.name | The internal name of the component <br>do not change | **info only**, do not change<br> `"nappl"` |
+**comps**&#8203;.nappl&#8203;.ports&#8203;.http | proxied port <br>do not change | **info only**, do not change<br> `8080` |
+**comps**&#8203;.nappl&#8203;.ports&#8203;.https | proxied port <br>do not change | **info only**, do not change<br> `8443` |
+**comps**&#8203;.nappl&#8203;.replicaSetType | The type of the replicaSet - important for the kubectl command <br>do not change | **info only**, do not change<br> `"StatefulSet"` |
+**comps**&#8203;.nappl&#8203;.restartReplicas | The amount of replicas to set when starting through the *nscale Administrator* client |  `1` |
+**comps**&#8203;.nstl&#8203;.displayName | The displayName name of the component as it appears in the RMS Server Properties <br>do not change | **info only**, do not change<br> `"Storage Layer"` |
+**comps**&#8203;.nstl&#8203;.enabled | Toggles if this component should be available through RMS |  `false` |
+**comps**&#8203;.nstl&#8203;.host | The host, where this component runs |  `"{{ .component.prefix }}nstl.{{ .Release.Namespace }}.svc.cluster.local"` |
+**comps**&#8203;.nstl&#8203;.name | The internal name of the component <br>do not change | **info only**, do not change<br> `"nstl"` |
+**comps**&#8203;.nstl&#8203;.ports&#8203;.tcp | proxied port <br>do not change | **info only**, do not change<br> `3005` |
+**comps**&#8203;.nstl&#8203;.ports&#8203;.tcps | proxied port <br>do not change | **info only**, do not change<br> `3006` |
+**comps**&#8203;.nstl&#8203;.replicaSetType | The type of the replicaSet - important for the kubectl command <br>do not change | **info only**, do not change<br> `"StatefulSet"` |
+**comps**&#8203;.nstl&#8203;.restartReplicas | The amount of replicas to set when starting through the *nscale Administrator* client |  `1` |
+**comps**&#8203;.pipeliner&#8203;.displayName | The displayName name of the component as it appears in the RMS Server Properties <br>do not change | **info only**, do not change<br> `"Pipeliner"` |
+**comps**&#8203;.pipeliner&#8203;.enabled | Toggles if this component should be available through RMS |  `false` |
+**comps**&#8203;.pipeliner&#8203;.host | The host, where this component runs |  `"{{ .component.prefix }}pipeliner.{{ .Release.Namespace }}.svc.cluster.local"` |
+**comps**&#8203;.pipeliner&#8203;.name | The internal name of the component <br>do not change | **info only**, do not change<br> `"pipeliner"` |
+**comps**&#8203;.pipeliner&#8203;.ports&#8203;.tcp | proxied port <br>do not change | **info only**, do not change<br> `4173` |
+**comps**&#8203;.pipeliner&#8203;.replicaSetType | The type of the replicaSet - important for the kubectl command <br>do not change | **info only**, do not change<br> `"StatefulSet"` |
+**comps**&#8203;.pipeliner&#8203;.restartReplicas | The amount of replicas to set when starting through the *nscale Administrator* client |  `1` |
+**comps**&#8203;.rs&#8203;.displayName | The displayName name of the component as it appears in the RMS Server Properties <br>do not change | **info only**, do not change<br> `"Rendition Server"` |
+**comps**&#8203;.rs&#8203;.enabled | Toggles if this component should be available through RMS |  `false` |
+**comps**&#8203;.rs&#8203;.host | The host, where this component runs |  `"{{ .component.prefix }}rs.{{ .Release.Namespace }}.svc.cluster.local"` |
+**comps**&#8203;.rs&#8203;.name | The internal name of the component <br>do not change | **info only**, do not change<br> `"rs"` |
+**comps**&#8203;.rs&#8203;.ports&#8203;.http | proxied port <br>do not change | **info only**, do not change<br> `8192` |
+**comps**&#8203;.rs&#8203;.ports&#8203;.https | proxied port <br>do not change | **info only**, do not change<br> `8193` |
+**comps**&#8203;.rs&#8203;.replicaSetType | The type of the replicaSet - important for the kubectl command <br>do not change | **info only**, do not change<br> `"Deployment"` |
+**comps**&#8203;.rs&#8203;.restartReplicas | The amount of replicas to set when starting through the *nscale Administrator* client |  `1` |
+**comps**&#8203;.web&#8203;.displayName | The displayName name of the component as it appears in the RMS Server Properties <br>do not change | **info only**, do not change<br> `"Application Layer Web"` |
+**comps**&#8203;.web&#8203;.enabled | Toggles if this component should be available through RMS |  `false` |
+**comps**&#8203;.web&#8203;.host | The host, where this component runs |  `"{{ .component.prefix }}web.{{ .Release.Namespace }}.svc.cluster.local"` |
+**comps**&#8203;.web&#8203;.name | The internal name of the component <br>do not change | **info only**, do not change<br> `"web"` |
+**comps**&#8203;.web&#8203;.ports&#8203;.http | proxied port <br>do not change | **info only**, do not change<br> `8090` |
+**comps**&#8203;.web&#8203;.ports&#8203;.https | proxied port <br>do not change | **info only**, do not change<br> `8453` |
+**comps**&#8203;.web&#8203;.replicaSetType | The type of the replicaSet - important for the kubectl command <br>do not change | **info only**, do not change<br> `"Deployment"` |
+**comps**&#8203;.web&#8203;.restartReplicas | The amount of replicas to set when starting through the *nscale Administrator* client |  `1` |
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"admin-server"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"git.nplus.cloud/subscription"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |   |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |   |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"rms"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.logs&#8203;.medium | the medium for the emptyDisk volume if you unset it, it drops it from the manifest |   |
+**mounts**&#8203;.logs&#8203;.path | Sets the path to the log files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-rms/log"` |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |  `"1Gi"` |
+**mounts**&#8203;.temp&#8203;.paths | Sets a list of paths to the temporary files <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-rms/tmp"]` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"100Mi"` |
+nameOverride | This overrides the output of the internal name function |   |
+nodeSelector | select specific nodes for this component |   |
+**security**&#8203;.cni&#8203;.adminIpRange | defines the IP Range of out-of-cluster Administrator Workplaces that are allowed to access the RMS Server. |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+
diff --git a/charts/rms/templates/component.tpl b/charts/rms/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/rms/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/rms/templates/configmap-haproxy.tpl b/charts/rms/templates/configmap-haproxy.tpl
new file mode 100644
index 0000000..830a15a
--- /dev/null
+++ b/charts/rms/templates/configmap-haproxy.tpl
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ .component.fullName }}-haproxy
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+data:
+{{- range $path, $bytes := .Files.Glob "haproxy/*" }}
+{{- base $path | nindent 2 }}: |
+{{- tpl ($.Files.Get $path) $ | nindent 4 }}
+{{- end }}
diff --git a/charts/rms/templates/configmap-repository.tpl b/charts/rms/templates/configmap-repository.tpl
new file mode 100644
index 0000000..f4e64ce
--- /dev/null
+++ b/charts/rms/templates/configmap-repository.tpl
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ .component.fullName }}-repository
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+data:
+{{- range $path, $bytes := .Files.Glob "repository/*" }}
+{{- base $path | nindent 2 }}: |
+{{- tpl ($.Files.Get $path) $ | nindent 4 }}
+{{- end }}
diff --git a/charts/rms/templates/networkpolicy.tpl b/charts/rms/templates/networkpolicy.tpl
new file mode 100644
index 0000000..56be557
--- /dev/null
+++ b/charts/rms/templates/networkpolicy.tpl
@@ -0,0 +1,42 @@
+{{- include "nplus.init" $ -}}
+
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+  policyTypes:
+  - Ingress
+  - Egress
+  ingress:
+  - from:
+    # Access from out of Cluster (Admin Desktop)
+    - ipBlock:
+        cidr: {{ ((.this.security).cni).adminIpRange | quote }}
+  egress:
+  - to:
+    # All Pods in Instance
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+
+  # Allow API Access
+  - ports:
+    - protocol: TCP
+      port: 16443
+    - protocol: TCP
+      port: 443
+{{- end }}
\ No newline at end of file
diff --git a/charts/rms/templates/pdb.tpl b/charts/rms/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/rms/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/rms/templates/rms-rbac.tpl b/charts/rms/templates/rms-rbac.tpl
new file mode 100755
index 0000000..d520592
--- /dev/null
+++ b/charts/rms/templates/rms-rbac.tpl
@@ -0,0 +1,53 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .component.fullName }}-svc-account
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ .component.fullName }}-role
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+rules:
+  - apiGroups: ["apps"]
+    resources: ["deployments","deployments/scale", "statefulsets","statefulsets/scale", "replicasets"]
+    verbs: ["get", "patch", "list"]
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ .component.fullName }}-role-binding
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoSharedResource" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: {{ .component.fullName }}-role
+subjects:
+- kind: ServiceAccount
+  name: {{ .component.fullName }}-svc-account
diff --git a/charts/rms/templates/service.tpl b/charts/rms/templates/service.tpl
new file mode 100644
index 0000000..321e0c6
--- /dev/null
+++ b/charts/rms/templates/service.tpl
@@ -0,0 +1,43 @@
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}-admin
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
+  type: LoadBalancer
+  {{- if .Values.externalIp }}
+  loadBalancerIP: {{ .Values.externalIp }}
+  {{- end }}
+  ports:
+    - protocol: TCP
+      port: 3120
+      targetPort: 3120
+      name: rms
+
+    {{- range $ckey, $component := .Values.comps }}
+    {{- if $component.enabled }}
+    {{- range $pkey, $port := .ports }}
+    - protocol: TCP
+      port: {{ $port }}
+      targetPort: {{ $port }}
+      name: {{ $ckey }}-{{ $pkey }}
+    {{- end }}
+    {{- end }}
+    {{- end }}
diff --git a/charts/rms/templates/statefulset.tpl b/charts/rms/templates/statefulset.tpl
new file mode 100644
index 0000000..f2888a3
--- /dev/null
+++ b/charts/rms/templates/statefulset.tpl
@@ -0,0 +1,128 @@
+{{- include "nplus.init" $ -}}
+
+{{- range $key, $component := .Values.components }}
+  {{- range $port := .ports }}
+# {{ $key }}/{{ $port }}
+  {{- end }}
+{{- end }}
+
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+
+  serviceName: {{ .component.fullName }}
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: {{ .Values.replicaCount }}
+  podManagementPolicy: OrderedReady
+  updateStrategy:
+    type: {{ .Values.updateStrategy | default "OnDelete" }}  
+  minReadySeconds: 5
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      serviceAccountName: {{ .component.fullName }}-svc-account
+      
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+
+      containers:
+      - name: rms
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+
+        command: ["/opt/ceyoniq/nscale-rms/bin/rms.bin"]
+
+        ports:
+        - containerPort: 3120
+          name: rms
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+        - name: conf
+          subPath: {{ .this.instance.name | quote }}
+          mountPath: /conf
+
+        {{- if ($.this.ingress).domain }}
+        - name: cert
+          subPath: tls.crt
+          mountPath: "/opt/ceyoniq/nscale-rms/bin/tls.cer"
+          readOnly: true
+        - name: cert
+          subPath: tls.key
+          mountPath: "/opt/ceyoniq/nscale-rms/bin/tls.key"
+          readOnly: true
+        {{- end }}
+        - name: repository
+          mountPath: /etc/ceyoniq/nscale-rms/repository
+
+      - name: proxy
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+
+        command: ["haproxy", "-f", "/etc/haproxy/haproxy.cfg", "-d"]
+
+        ports:
+        {{- range $ckey, $component := .Values.comps }}
+        {{- if $component.enabled }}
+        {{- range $pkey, $port := .ports }}
+        - containerPort: {{ $port }}
+          name: {{ $ckey }}-{{ $pkey }}
+          protocol: TCP
+        {{- end }}
+        {{- end }}
+        {{- end }}
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+        - name: haproxy
+          subPath: haproxy.cfg
+          mountPath: /etc/haproxy/haproxy.cfg
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+      - name: conf
+        persistentVolumeClaim:
+          claimName: conf
+      {{- if ($.this.ingress).domain }}
+      - name: cert
+        secret:
+          secretName: {{ ($.this.ingress).secret }}
+      {{- end }}
+      - name: repository
+        configMap:
+          name: {{ .component.fullName }}-repository
+          defaultMode: 0777
+      - name: haproxy
+        configMap:
+          name: {{ .component.fullName }}-haproxy
+          defaultMode: 0777
diff --git a/charts/rms/values.schema.json b/charts/rms/values.schema.json
new file mode 100644
index 0000000..06a3ae4
--- /dev/null
+++ b/charts/rms/values.schema.json
@@ -0,0 +1,1082 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "comps": {
+      "additionalProperties": false,
+      "properties": {
+        "cmis": {
+          "additionalProperties": false,
+          "properties": {
+            "displayName": {
+              "default": "CMIS Connector",
+              "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+              "title": "displayName"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "Toggles if this component should be available through RMS",
+              "title": "enabled"
+            },
+            "host": {
+              "default": "{{ .component.prefix }}cmis.{{ .Release.Namespace }}.svc.cluster.local",
+              "description": "The host, where this component runs",
+              "title": "host"
+            },
+            "name": {
+              "default": "cmis",
+              "description": "The internal name of the component @internal -- do not change",
+              "title": "name"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+              "properties": {
+                "http": {
+                  "default": "8096",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8196",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "https"
+                }
+              },
+              "title": "ports"
+            },
+            "replicaSetType": {
+              "default": "Deployment",
+              "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+              "title": "replicaSetType"
+            },
+            "restartReplicas": {
+              "default": "1",
+              "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+              "title": "restartReplicas"
+            }
+          },
+          "title": "cmis",
+          "type": "object"
+        },
+        "ilm": {
+          "additionalProperties": false,
+          "properties": {
+            "displayName": {
+              "default": "SAP ILM Connector",
+              "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+              "title": "displayName"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "Toggles if this component should be available through RMS",
+              "title": "enabled"
+            },
+            "host": {
+              "default": "{{ .component.prefix }}ilm.{{ .Release.Namespace }}.svc.cluster.local",
+              "description": "The host, where this component runs",
+              "title": "host"
+            },
+            "name": {
+              "default": "ilm",
+              "description": "The internal name of the component @internal -- do not change",
+              "title": "name"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+              "properties": {
+                "http": {
+                  "default": "8297",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8397",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "https"
+                }
+              },
+              "title": "ports"
+            },
+            "replicaSetType": {
+              "default": "Deployment",
+              "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+              "title": "replicaSetType"
+            },
+            "restartReplicas": {
+              "default": "1",
+              "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+              "title": "restartReplicas"
+            }
+          },
+          "title": "ilm",
+          "type": "object"
+        },
+        "mon": {
+          "additionalProperties": false,
+          "properties": {
+            "displayName": {
+              "default": "Monitoring Console",
+              "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+              "title": "displayName"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "Toggles if this component should be available through RMS",
+              "title": "enabled"
+            },
+            "host": {
+              "default": "{{ .component.prefix }}mon.{{ .Release.Namespace }}.svc.cluster.local",
+              "description": "The host, where this component runs",
+              "title": "host"
+            },
+            "name": {
+              "default": "mon",
+              "description": "The internal name of the component @internal -- do not change",
+              "title": "name"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+              "properties": {
+                "http": {
+                  "default": "8387",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8388",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "https"
+                },
+                "tcp": {
+                  "default": "8389",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "tcp"
+                }
+              },
+              "title": "ports"
+            },
+            "replicaSetType": {
+              "default": "StatefulSet",
+              "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+              "title": "replicaSetType"
+            },
+            "restartReplicas": {
+              "default": "1",
+              "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+              "title": "restartReplicas"
+            }
+          },
+          "title": "mon",
+          "type": "object"
+        },
+        "nappl": {
+          "additionalProperties": false,
+          "description": "Values for the nappl component",
+          "properties": {
+            "displayName": {
+              "default": "Application Layer",
+              "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+              "title": "displayName"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "Toggles if this component should be available through RMS",
+              "title": "enabled"
+            },
+            "host": {
+              "default": "{{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local",
+              "description": "The host, where this component runs",
+              "title": "host"
+            },
+            "name": {
+              "default": "nappl",
+              "description": "The internal name of the component @internal -- do not change",
+              "title": "name"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+              "properties": {
+                "http": {
+                  "default": "8080",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8443",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "https"
+                }
+              },
+              "title": "ports"
+            },
+            "replicaSetType": {
+              "default": "StatefulSet",
+              "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+              "title": "replicaSetType"
+            },
+            "restartReplicas": {
+              "default": "1",
+              "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+              "title": "restartReplicas"
+            }
+          },
+          "title": "nappl"
+        },
+        "nstl": {
+          "additionalProperties": false,
+          "properties": {
+            "displayName": {
+              "default": "Storage Layer",
+              "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+              "title": "displayName"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "Toggles if this component should be available through RMS",
+              "title": "enabled"
+            },
+            "host": {
+              "default": "{{ .component.prefix }}nstl.{{ .Release.Namespace }}.svc.cluster.local",
+              "description": "The host, where this component runs",
+              "title": "host"
+            },
+            "name": {
+              "default": "nstl",
+              "description": "The internal name of the component @internal -- do not change",
+              "title": "name"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+              "properties": {
+                "tcp": {
+                  "default": "3005",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "tcp"
+                },
+                "tcps": {
+                  "default": "3006",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "tcps"
+                }
+              },
+              "title": "ports"
+            },
+            "replicaSetType": {
+              "default": "StatefulSet",
+              "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+              "title": "replicaSetType"
+            },
+            "restartReplicas": {
+              "default": "1",
+              "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+              "title": "restartReplicas"
+            }
+          },
+          "title": "nstl",
+          "type": "object"
+        },
+        "pipeliner": {
+          "additionalProperties": false,
+          "properties": {
+            "displayName": {
+              "default": "Pipeliner",
+              "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+              "title": "displayName"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "Toggles if this component should be available through RMS",
+              "title": "enabled"
+            },
+            "host": {
+              "default": "{{ .component.prefix }}pipeliner.{{ .Release.Namespace }}.svc.cluster.local",
+              "description": "The host, where this component runs",
+              "title": "host"
+            },
+            "name": {
+              "default": "pipeliner",
+              "description": "The internal name of the component @internal -- do not change",
+              "title": "name"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+              "properties": {
+                "tcp": {
+                  "default": "4173",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "tcp"
+                }
+              },
+              "title": "ports"
+            },
+            "replicaSetType": {
+              "default": "StatefulSet",
+              "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+              "title": "replicaSetType"
+            },
+            "restartReplicas": {
+              "default": "1",
+              "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+              "title": "restartReplicas"
+            }
+          },
+          "title": "pipeliner",
+          "type": "object"
+        },
+        "rs": {
+          "additionalProperties": false,
+          "properties": {
+            "displayName": {
+              "default": "Rendition Server",
+              "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+              "title": "displayName"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "Toggles if this component should be available through RMS",
+              "title": "enabled"
+            },
+            "host": {
+              "default": "{{ .component.prefix }}rs.{{ .Release.Namespace }}.svc.cluster.local",
+              "description": "The host, where this component runs",
+              "title": "host"
+            },
+            "name": {
+              "default": "rs",
+              "description": "The internal name of the component @internal -- do not change",
+              "title": "name"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+              "properties": {
+                "http": {
+                  "default": "8192",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8193",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "https"
+                }
+              },
+              "title": "ports"
+            },
+            "replicaSetType": {
+              "default": "Deployment",
+              "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+              "title": "replicaSetType"
+            },
+            "restartReplicas": {
+              "default": "1",
+              "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+              "title": "restartReplicas"
+            }
+          },
+          "title": "rs",
+          "type": "object"
+        },
+        "web": {
+          "additionalProperties": false,
+          "properties": {
+            "displayName": {
+              "default": "Application Layer Web",
+              "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+              "title": "displayName"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "Toggles if this component should be available through RMS",
+              "title": "enabled"
+            },
+            "host": {
+              "default": "{{ .component.prefix }}web.{{ .Release.Namespace }}.svc.cluster.local",
+              "description": "The host, where this component runs",
+              "title": "host"
+            },
+            "name": {
+              "default": "web",
+              "description": "The internal name of the component @internal -- do not change",
+              "title": "name"
+            },
+            "ports": {
+              "additionalProperties": false,
+              "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+              "properties": {
+                "http": {
+                  "default": "8090",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "http"
+                },
+                "https": {
+                  "default": "8453",
+                  "description": "proxied port @internal -- do not change",
+                  "title": "https"
+                }
+              },
+              "title": "ports"
+            },
+            "replicaSetType": {
+              "default": "Deployment",
+              "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+              "title": "replicaSetType"
+            },
+            "restartReplicas": {
+              "default": "1",
+              "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+              "title": "restartReplicas"
+            }
+          },
+          "title": "web",
+          "type": "object"
+        }
+      },
+      "title": "comps",
+      "type": "object"
+    },
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "admin-server",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullPolicy": {
+          "default": "IfNotPresent",
+          "title": "pullPolicy",
+          "type": "string"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "git.nplus.cloud/subscription",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "1.2.1200",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "rms",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta",
+      "type": "object"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "medium": {
+              "default": "",
+              "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+              "title": "medium"
+            },
+            "path": {
+              "default": "/opt/ceyoniq/nscale-rms/log",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "100Mi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+      "title": "replicaCount"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "cni": {
+          "additionalProperties": false,
+          "properties": {
+            "adminIpRange": {
+              "default": "",
+              "description": "defines the IP Range of out-of-cluster Administrator Workplaces that are allowed to access the RMS Server.",
+              "title": "adminIpRange"
+            }
+          },
+          "title": "cni",
+          "type": "object"
+        },
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/rms/values.yaml b/charts/rms/values.yaml
new file mode 100644
index 0000000..eceeede
--- /dev/null
+++ b/charts/rms/values.yaml
@@ -0,0 +1,516 @@
+# yaml-language-server: $schema=values.schema.json
+comps:
+  # -- Values for the nappl component
+  nappl:
+    # -- The internal name of the component
+    # @internal -- do not change
+    name: nappl
+    # -- The displayName name of the component as it appears in the RMS Server Properties
+    # @internal -- do not change
+    displayName: "Application Layer"
+    # -- The amount of replicas to set when starting through the *nscale Administrator* client
+    restartReplicas: 1
+    # -- The type of the replicaSet - important for the kubectl command
+    # @internal -- do not change
+    replicaSetType: StatefulSet
+    # -- Toggles if this component should be available through RMS
+    enabled: false
+    # -- The ports exposed by the L4 Load Balancer / Reverse Proxy
+    # @internal -- do not change
+    ports:
+      # -- proxied port
+      # @internal -- do not change
+      http: 8080
+      # -- proxied port
+      # @internal -- do not change
+      https: 8443
+    # -- The host, where this component runs
+    host: "{{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local"
+  nstl:
+    # -- The internal name of the component
+    # @internal -- do not change
+    name: nstl
+    # -- The displayName name of the component as it appears in the RMS Server Properties
+    # @internal -- do not change
+    displayName: "Storage Layer"
+    # -- The amount of replicas to set when starting through the *nscale Administrator* client
+    restartReplicas: 1
+    # -- The type of the replicaSet - important for the kubectl command
+    # @internal -- do not change
+    replicaSetType: StatefulSet
+    # -- Toggles if this component should be available through RMS
+    enabled: false
+    # -- The ports exposed by the L4 Load Balancer / Reverse Proxy
+    # @internal -- do not change
+    ports:
+      # -- proxied port
+      # @internal -- do not change
+      tcp: 3005
+      # -- proxied port
+      # @internal -- do not change
+      tcps: 3006
+    # -- The host, where this component runs
+    host: "{{ .component.prefix }}nstl.{{ .Release.Namespace }}.svc.cluster.local"
+  rs:
+    # -- The internal name of the component
+    # @internal -- do not change
+    name: rs
+    # -- The displayName name of the component as it appears in the RMS Server Properties
+    # @internal -- do not change
+    displayName: "Rendition Server"
+    # -- The amount of replicas to set when starting through the *nscale Administrator* client
+    restartReplicas: 1
+    # -- The type of the replicaSet - important for the kubectl command
+    # @internal -- do not change
+    replicaSetType: Deployment
+    # -- Toggles if this component should be available through RMS
+    enabled: false
+    # -- The ports exposed by the L4 Load Balancer / Reverse Proxy
+    # @internal -- do not change
+    ports:
+      # -- proxied port
+      # @internal -- do not change
+      http: 8192
+      # -- proxied port
+      # @internal -- do not change
+      https: 8193
+    # -- The host, where this component runs
+    host: "{{ .component.prefix }}rs.{{ .Release.Namespace }}.svc.cluster.local"
+  mon:
+    # -- The internal name of the component
+    # @internal -- do not change
+    name: mon
+    # -- The displayName name of the component as it appears in the RMS Server Properties
+    # @internal -- do not change
+    displayName: "Monitoring Console"
+    # -- The amount of replicas to set when starting through the *nscale Administrator* client
+    restartReplicas: 1
+    # -- The type of the replicaSet - important for the kubectl command
+    # @internal -- do not change
+    replicaSetType: StatefulSet
+    # -- Toggles if this component should be available through RMS
+    enabled: false
+    # -- The ports exposed by the L4 Load Balancer / Reverse Proxy
+    # @internal -- do not change
+    ports:
+      # -- proxied port
+      # @internal -- do not change
+      http: 8387
+      # -- proxied port
+      # @internal -- do not change
+      https: 8388
+      # -- proxied port
+      # @internal -- do not change
+      tcp: 8389 # rmi
+    # -- The host, where this component runs
+    host: "{{ .component.prefix }}mon.{{ .Release.Namespace }}.svc.cluster.local"
+  ilm:
+    # -- The internal name of the component
+    # @internal -- do not change
+    name: ilm
+    # -- The displayName name of the component as it appears in the RMS Server Properties
+    # @internal -- do not change
+    displayName: "SAP ILM Connector"
+    # -- The amount of replicas to set when starting through the *nscale Administrator* client
+    restartReplicas: 1
+    # -- The type of the replicaSet - important for the kubectl command
+    # @internal -- do not change
+    replicaSetType: Deployment
+    # -- Toggles if this component should be available through RMS
+    enabled: false
+    # -- The ports exposed by the L4 Load Balancer / Reverse Proxy
+    # @internal -- do not change
+    ports:
+      # -- proxied port
+      # @internal -- do not change
+      http: 8297
+      # -- proxied port
+      # @internal -- do not change
+      https: 8397
+    # -- The host, where this component runs
+    host: "{{ .component.prefix }}ilm.{{ .Release.Namespace }}.svc.cluster.local"
+  cmis:
+    # -- The internal name of the component
+    # @internal -- do not change
+    name: cmis
+    # -- The displayName name of the component as it appears in the RMS Server Properties
+    # @internal -- do not change
+    displayName: "CMIS Connector"
+    # -- The amount of replicas to set when starting through the *nscale Administrator* client
+    restartReplicas: 1
+    # -- The type of the replicaSet - important for the kubectl command
+    # @internal -- do not change
+    replicaSetType: Deployment
+    # -- Toggles if this component should be available through RMS
+    enabled: false
+    # -- The ports exposed by the L4 Load Balancer / Reverse Proxy
+    # @internal -- do not change
+    ports:
+      # -- proxied port
+      # @internal -- do not change
+      http: 8096
+      # -- proxied port
+      # @internal -- do not change
+      https: 8196
+    # -- The host, where this component runs
+    host: "{{ .component.prefix }}cmis.{{ .Release.Namespace }}.svc.cluster.local"
+  web:
+    # -- The internal name of the component
+    # @internal -- do not change
+    name: web
+    # -- The displayName name of the component as it appears in the RMS Server Properties
+    # @internal -- do not change
+    displayName: "Application Layer Web"
+    # -- The amount of replicas to set when starting through the *nscale Administrator* client
+    restartReplicas: 1
+    # -- The type of the replicaSet - important for the kubectl command
+    # @internal -- do not change
+    replicaSetType: Deployment
+    # -- Toggles if this component should be available through RMS
+    enabled: false
+    # -- The ports exposed by the L4 Load Balancer / Reverse Proxy
+    # @internal -- do not change
+    ports:
+      # -- proxied port
+      # @internal -- do not change
+      http: 8090
+      # -- proxied port
+      # @internal -- do not change
+      https: 8453
+    # -- The host, where this component runs
+    host: "{{ .component.prefix }}web.{{ .Release.Namespace }}.svc.cluster.local"
+  pipeliner:
+    # -- The internal name of the component
+    # @internal -- do not change
+    name: pipeliner
+    # -- The displayName name of the component as it appears in the RMS Server Properties
+    # @internal -- do not change
+    displayName: "Pipeliner"
+    # -- The amount of replicas to set when starting through the *nscale Administrator* client
+    restartReplicas: 1
+    # -- The type of the replicaSet - important for the kubectl command
+    # @internal -- do not change
+    replicaSetType: StatefulSet
+    # -- Toggles if this component should be available through RMS
+    enabled: false
+    # -- The ports exposed by the L4 Load Balancer / Reverse Proxy
+    # @internal -- do not change
+    ports:
+      # -- proxied port
+      # @internal -- do not change
+      tcp: 4173 # for admin and mon
+    # -- The host, where this component runs
+    host: "{{ .component.prefix }}pipeliner.{{ .Release.Namespace }}.svc.cluster.local"
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: rms
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http:
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https:
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language:
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer:
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- the replicaCount for the Storage Layer. This does not make sense, so
+# leave this at 1 at any time, unless you know exactly what you are doing.
+# @ignore
+replicaCount: 1
+mounts:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the size of the log disk (all paths)
+    size: "1Gi"
+    # -- the medium for the emptyDisk volume
+    # if you unset it, it drops it from the manifest
+    medium:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-rms/log"
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/nscale-rms/tmp"
+    # -- Sets the size of the temporary disk (all paths)
+    size: "100Mi"
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path:
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path:
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+  file:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: admin-server
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: git.nplus.cloud/subscription
+  pullPolicy: IfNotPresent
+# -- Security Section defining default runtime environment for your container
+security:
+  cni:
+    # -- defines the IP Range of out-of-cluster Administrator Workplaces that are
+    # allowed to access the RMS Server.
+    adminIpRange:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/rs/Chart.yaml b/charts/rs/Chart.yaml
new file mode 100644
index 0000000..305797c
--- /dev/null
+++ b/charts/rs/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-rs
+description: nscale Rendition Server, providing means to format-convert common file types
+icon: data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4KPHN2ZyB2ZXJzaW9uPSIxLjEiIGlkPSJFYmVuZV8xIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB4PSIwcHgiIHk9IjBweCIKCSB2aWV3Qm94PSIwIDAgNTEuMDI0IDUxLjAyNCIgZW5hYmxlLWJhY2tncm91bmQ9Im5ldyAwIDAgNTEuMDI0IDUxLjAyNCIgeG1sOnNwYWNlPSJwcmVzZXJ2ZSI+CjxnPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIzMi4zMjIsMTkuNzQ0IDIwLjY0OSwxOS43NDQgMTguNTkxLDMxLjQxNyAzMC4yNjQsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iNDcuMTg1LDE5Ljc0NCAzNS41MTIsMTkuNzQ0IDMzLjQ1NCwzMS40MTcgNDUuMTI2LDMxLjQxNyAJIi8+Cgk8cG9seWdvbiBmaWxsPSIjQTRCRkU0IiBwb2ludHM9IjI5Ljc2NiwzNC41NTEgMTguMDk0LDM0LjU1MSAxNi4wMzUsNDYuMjI0IDI3LjcwOCw0Ni4yMjQgCSIvPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIxNy41NywxOS43NDQgNS44OTcsMTkuNzQ0IDMuODM5LDMxLjQxNyAxNS41MTIsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iMzUuMTUsNC43OTkgMjMuNDc3LDQuNzk5IDIxLjQxOSwxNi40NzIgMzMuMDkyLDE2LjQ3MiAJIi8+Cjwvc3ZnPgo=
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/rs/README.md b/charts/rs/README.md
new file mode 100644
index 0000000..a068d03
--- /dev/null
+++ b/charts/rs/README.md
@@ -0,0 +1,174 @@
+
+
+# nplus-component-rs
+
+nscale Rendition Server, providing means to format-convert common file types
+
+## nplus-component-rs Chart Configuration
+
+You can customize / configure nplus-component-rs by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"rendition-server"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |   |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `false` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**javaOpts**&#8203;.javaMaxMem | set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed |   |
+**javaOpts**&#8203;.javaMaxRamPercentage | set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any. |   |
+**javaOpts**&#8203;.javaMinMem | set the minimum memory, java will consume |   |
+**javaOpts**&#8203;.javaMisc | Any misc Java Options that need to be passed to the container |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"java"` |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8192` |
+**meta**&#8203;.ports&#8203;.https | The tls / https port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8193` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"rendition-server"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"rs"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCount | if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas. |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-rendition-server/conf"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.paths | Sets a list of paths to the shared files <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-rendition-server/work"]` |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |  `"10Gi"` |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.fonts&#8203;.path | Sets the path to the fonts folder. <br>do not change this value | **info only**, do not change<br> `"/usr/share/fonts/truetype/nplus"` |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.license&#8203;.path | Sets the path to the license files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-rendition-server/conf/license.xml"` |
+**mounts**&#8203;.logs&#8203;.path | Sets the path to the log files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-rendition-server/logs"` |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |  `"5Gi"` |
+**mounts**&#8203;.temp&#8203;.paths | Sets a list of paths to the temporary files <br>do not change this value | **info only**, do not change<br> `["/tmp"]` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"10Gi"` |
+nameOverride | This overrides the output of the internal name function |   |
+nodeSelector | select specific nodes for this component |   |
+replicaCount | Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1. |  `1` |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+updateStrategy | the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures. |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+
diff --git a/charts/rs/templates/component.tpl b/charts/rs/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/rs/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/rs/templates/deployment.tpl b/charts/rs/templates/deployment.tpl
new file mode 100644
index 0000000..9017d3f
--- /dev/null
+++ b/charts/rs/templates/deployment.tpl
@@ -0,0 +1,93 @@
+{{- include "nplus.init" $ -}}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: {{ .Values.replicaCount }}
+  strategy:
+    type: RollingUpdate
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.templateAffinity" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+
+      containers:
+      - name: rendition-server
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+
+          - name: RSX_APPENDER
+            value: Console
+          - name: RSX_PASSWORD
+            value: "admin"
+
+        {{- include "nplus.environment" . | nindent 8 }}
+
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}        
+        startupProbe:
+          httpGet:
+            path: /rs
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          initialDelaySeconds: 20
+          failureThreshold: 30
+          periodSeconds: 10
+          timeoutSeconds: 5
+        readinessProbe:
+          httpGet:
+            path: /rs
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+        # -- Ceyoniq does currently not define an *official* livenessProbe, so we use
+        # one that quickly checks the main socket on Layer 4.
+        livenessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          # initialDelaySeconds: 30
+          periodSeconds: 10
+        {{- end }}
+        
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+
+
diff --git a/charts/rs/templates/networkpolicy.tpl b/charts/rs/templates/networkpolicy.tpl
new file mode 100644
index 0000000..a0b3c02
--- /dev/null
+++ b/charts/rs/templates/networkpolicy.tpl
@@ -0,0 +1,53 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+
+  policyTypes:
+  - Ingress
+
+  ingress:
+
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+
+  - from:
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/type: core
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+
+  - from:
+    - podSelector:
+        matchLabels:
+          nplus/group: {{ .instance.group }}
+          nplus/component: pipeliner
+    {{- if ((.this.security).cni).excludeUnusedPorts }}
+    ports:
+    {{- include "nplus.defaultPolicyPorts" . | nindent 4 }}
+    {{- end }}
+
+  {{- include "nplus.networkpolicy.allowFromAdmin" . | nindent 2 }}
+  {{- include "nplus.networkpolicy.allowFromMon" . | nindent 2 }}
+
+{{- end }}
\ No newline at end of file
diff --git a/charts/rs/templates/pdb.tpl b/charts/rs/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/rs/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/rs/templates/pvc.tpl b/charts/rs/templates/pvc.tpl
new file mode 100644
index 0000000..b7ac9a2
--- /dev/null
+++ b/charts/rs/templates/pvc.tpl
@@ -0,0 +1 @@
+{{- include "nplus.pvc" . }}
diff --git a/charts/rs/templates/service.tpl b/charts/rs/templates/service.tpl
new file mode 100644
index 0000000..86382ee
--- /dev/null
+++ b/charts/rs/templates/service.tpl
@@ -0,0 +1,28 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+  type: ClusterIP
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
+
diff --git a/charts/rs/values.schema.json b/charts/rs/values.schema.json
new file mode 100644
index 0000000..806ed79
--- /dev/null
+++ b/charts/rs/values.schema.json
@@ -0,0 +1,804 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "rendition-server",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.3.1301.2024121910",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "false",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "javaOpts": {
+      "additionalProperties": false,
+      "description": "Options for the Java VM",
+      "properties": {
+        "javaMaxMem": {
+          "default": "",
+          "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+          "title": "javaMaxMem"
+        },
+        "javaMaxRamPercentage": {
+          "default": "",
+          "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+          "title": "javaMaxRamPercentage"
+        },
+        "javaMinMem": {
+          "default": "",
+          "description": "set the minimum memory, java will consume",
+          "title": "javaMinMem"
+        },
+        "javaMisc": {
+          "default": "",
+          "description": "Any misc Java Options that need to be passed to the container",
+          "title": "javaMisc"
+        }
+      },
+      "title": "javaOpts"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "description": "defines internal constants for nplus. do not change these values",
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "java",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8192",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "8193",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "rendition-server",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "rs",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta"
+    },
+    "minReplicaCount": {
+      "default": "",
+      "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+      "title": "minReplicaCount"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-rendition-server/conf",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "10Gi",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "/usr/share/fonts/truetype/nplus",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-rendition-server/conf/license.xml",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-rendition-server/logs",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "5Gi",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "10Gi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "updateStrategy": {
+      "default": "",
+      "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+      "title": "updateStrategy"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/rs/values.yaml b/charts/rs/values.yaml
new file mode 100644
index 0000000..20fee87
--- /dev/null
+++ b/charts/rs/values.yaml
@@ -0,0 +1,406 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: false
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath:
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# -- Sets the number of replicas in this replicaSet.
+# Some Components (like nstl or sharepoint) only allow a count of 1.
+replicaCount: 1
+# -- the update Strategy for this component. Normally, you can update all components
+# rolling, except for nappl, where you need to follow the documented update procedures.
+updateStrategy:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+      - /tmp
+    # -- Sets the size of the temporary disk (all paths)
+    size: "10Gi"
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: /opt/ceyoniq/nscale-rendition-server/conf
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path: /opt/ceyoniq/nscale-rendition-server/logs
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size: "5Gi"
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path: /opt/ceyoniq/nscale-rendition-server/conf/license.xml
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path: /usr/share/fonts/truetype/nplus
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  file:
+    # -- Sets the size of the shared disk
+    size: "10Gi"
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+      - /opt/ceyoniq/nscale-rendition-server/work
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+  data:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- Options for the Java VM
+javaOpts:
+  # -- set the percentage of RAM, Java will use of the total.
+  # The total amount is the amount installed in the K8s Cluster Node,
+  # OR the Memory Limit set (see resources), if any.
+  javaMaxRamPercentage:
+  # -- set the minimum memory, java will consume
+  javaMinMem:
+  # -- set the maximum memory, java will consume.
+  # Attention: This is NOT the real maximum and it does not include any non Java memory.
+  # Please read google, as this is highly discussed
+  javaMaxMem:
+  # -- Any misc Java Options that need to be passed to the container
+  javaMisc:
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: rendition-server
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- defines internal constants for nplus.
+# do not change these values
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: rs
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8192
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https: 8193
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: java
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: rendition-server
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCount, a podDesruptionBudget will be created with this value as
+# minAvailable, using the full component as selector. This is useful for components, that are
+# using multiple replicas.
+minReplicaCount:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/sharepoint/Chart.yaml b/charts/sharepoint/Chart.yaml
new file mode 100644
index 0000000..a1260a1
--- /dev/null
+++ b/charts/sharepoint/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-sharepoint
+description: nscale SharePoint Connector, providing SP archiving to the Instance
+icon: data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4KPHN2ZyB2ZXJzaW9uPSIxLjEiIGlkPSJFYmVuZV8xIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB4PSIwcHgiIHk9IjBweCIKCSB2aWV3Qm94PSIwIDAgNTEuMDI0IDUxLjAyNCIgZW5hYmxlLWJhY2tncm91bmQ9Im5ldyAwIDAgNTEuMDI0IDUxLjAyNCIgeG1sOnNwYWNlPSJwcmVzZXJ2ZSI+CjxnPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIzMi4zMjIsMTkuNzQ0IDIwLjY0OSwxOS43NDQgMTguNTkxLDMxLjQxNyAzMC4yNjQsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iNDcuMTg1LDE5Ljc0NCAzNS41MTIsMTkuNzQ0IDMzLjQ1NCwzMS40MTcgNDUuMTI2LDMxLjQxNyAJIi8+Cgk8cG9seWdvbiBmaWxsPSIjQTRCRkU0IiBwb2ludHM9IjI5Ljc2NiwzNC41NTEgMTguMDk0LDM0LjU1MSAxNi4wMzUsNDYuMjI0IDI3LjcwOCw0Ni4yMjQgCSIvPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIxNy41NywxOS43NDQgNS44OTcsMTkuNzQ0IDMuODM5LDMxLjQxNyAxNS41MTIsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iMzUuMTUsNC43OTkgMjMuNDc3LDQuNzk5IDIxLjQxOSwxNi40NzIgMzMuMDkyLDE2LjQ3MiAJIi8+Cjwvc3ZnPgo=
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/sharepoint/README.md b/charts/sharepoint/README.md
new file mode 100644
index 0000000..75640fa
--- /dev/null
+++ b/charts/sharepoint/README.md
@@ -0,0 +1,293 @@
+
+
+# nplus-component-sharepoint
+
+nscale SharePoint Connector, providing SP archiving to the Instance
+
+# Single Server with multiple Replicas (and same Config)
+
+In the instance, configure
+
+```
+components:
+  sharepoint: true
+sharepoint:
+  replicas: 2
+```
+
+# Multiple Servers with different Configs
+
+```
+components:
+  sharepointa: true
+  sharepointb: true
+sharepointa:
+  replicas: 1
+sharepointb:
+  replicas: 1
+```
+
+this way, you will have two sharepoint instances with different config.
+
+# Cluster Service
+
+in multi server mode, the Instance Chart deploys a sharepoint cluster service that balances across sharepoint A and B.
+
+You **can** use it if you want, or you use the services for sharepointa and sharepointb and load balance manually.
+
+# Working with multiple SharePoint Connectors and Ingresses
+
+If you are working with multiple Sharepoint Connectors (a,b,c,d), you do not want them all to define the same ingress path, as it would block the ingress from being created.
+
+There are two solutions to this:
+
+1. Disable the ingress on the sharepoint connectors you do not want an ingress to be created. You can still create an ingress manually, either routing traffic via the sharepoint component service, or alternatively routing the traffic via the global cluster service (see above) that is coming with the instance chart.
+
+2. Instead of disabling the ingress, you can also change the path for each sharepoint instance. Then you could still connect to an individual SP service via the path given, or alternatively route the traffic via the global cluster service that is coming with the instance chart. (same as above)
+
+**When would you consider this?**
+
+You would want this, if you have multiple instances, each with a completely different archiving configuration, **but** a common retrieval schedule. You would gain a high availability retrieval scenario, even if you only have a single service for archiving, as archiving does not necessarily needs to be HA.
+
+## nplus-component-sharepoint Chart Configuration
+
+You can customize / configure nplus-component-sharepoint by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+**clusterService**&#8203;.contextPath | set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances) |   |
+**clusterService**&#8203;.enabled |  |  `false` |
+**connector**&#8203;.cTagPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"cTag"` |
+**connector**&#8203;.eTagPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"eTag"` |
+**connector**&#8203;.idPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"sharePointId"` |
+**connector**&#8203;.listItemIdPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"SharePointListItemId"` |
+**connector**&#8203;.nscaleExpirationPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**connector**&#8203;.nscaleGdprRelevantPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**connector**&#8203;.nscaleLegalHidePropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**connector**&#8203;.nscaleLegalHoldPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**connector**&#8203;.nscaleRetentionPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**connector**&#8203;.parentIdPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"sharePointParentId"` |
+**connector**&#8203;.sharePointChangeTokenPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**connector**&#8203;.sharePointCreatedPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"SharePointCreated"` |
+**connector**&#8203;.sharePointCreatorPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"SharePointCreator"` |
+**connector**&#8203;.sharePointEditedPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"SharePointLastModified"` |
+**connector**&#8203;.sharePointEditorPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"SharePointEditor"` |
+**connector**&#8203;.stubIdPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"SharePointStubId"` |
+**connector**&#8203;.stubListItemIdPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"SharePointStubListItemId"` |
+**connector**&#8203;.webUrlPropertyName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"sharePointWebUrl"` |
+doInitialCrawl | toggle initial crawling. This value is mandatory. |  `"false"` |
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"sharepoint-connector"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/nscale_spc"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**javaOpts**&#8203;.javaMaxMem | set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed |   |
+**javaOpts**&#8203;.javaMaxRamPercentage | set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any. |   |
+**javaOpts**&#8203;.javaMinMem | set the minimum memory, java will consume |   |
+**javaOpts**&#8203;.javaMisc | Any misc Java Options that need to be passed to the container |   |
+**management**&#8203;.port | see mail from Manuel, 30.7.2024 |  `"18098"` |
+**management**&#8203;.security | see mail from Manuel, 30.7.2024 |  `"false"` |
+**management**&#8203;.ssl | see mail from Manuel, 30.7.2024 |  `"false"` |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"java"` |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8098` |
+**meta**&#8203;.ports&#8203;.https | The tls / https port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8498` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"sharepoint-connector"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"sharepoint"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.paths | Sets the path to the component certs. <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/sharepoint-connector/conf/apicert.pfx", "/opt/ceyoniq/sharepoint-connector/conf/apicert.pem", "/opt/ceyoniq/sharepoint-connector/conf/keystore.ks"]` |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/sharepoint-connector/conf"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.logs&#8203;.path | Sets the path to the log files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/sharepoint-connector/bin/logs"` |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |  `"1Gi"` |
+**mounts**&#8203;.temp&#8203;.paths | Sets a list of paths to the temporary files <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/sharepoint-connector/temp", "/tmp"]` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"1Gi"` |
+nameOverride | This overrides the output of the internal name function |   |
+**nappl**&#8203;.account | The technical account to login with |   |
+**nappl**&#8203;.baseFolder | The base folder, this component should write to |   |
+**nappl**&#8203;.docArea | The document area, this component should write to |   |
+**nappl**&#8203;.domain | The domain of the technical account |   |
+**nappl**&#8203;.host | nappl host name |   |
+**nappl**&#8203;.instance | instance of the Application Layer, likely `instance1` |   |
+**nappl**&#8203;.password | The password of the technical accunt (if not set by secret) |   |
+**nappl**&#8203;.port | nappl port (http 8080 or https 8443) |   |
+**nappl**&#8203;.secret | An optional secret that holds the credentials (the keys must be `account` and `password`) |   |
+**nappl**&#8203;.ssl | sets the Advanced Connect to tls |   |
+nodeSelector | select specific nodes for this component |   |
+parallelRequests | amount of parallel requests |  `5` |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**sharepoint**&#8203;.clientCertPw | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**sharepoint**&#8203;.clientId | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**sharepoint**&#8203;.doCheckOut | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `false` |
+**sharepoint**&#8203;.secret | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**sharepoint**&#8203;.serviceBusConnectionString | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**sharepoint**&#8203;.serviceBusQueueName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**sharepoint**&#8203;.serviceBusRetentionConnectionString | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**sharepoint**&#8203;.serviceBusRetentionQueueName | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**sharepoint**&#8203;.serviceBusTopicNameConfigUpdate | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**sharepoint**&#8203;.spHost | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"https://example.com"` |
+**sharepoint**&#8203;.tenantId | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**sharepoint**&#8203;.triggerProperty | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"toBeArchived"` |
+**sharepoint**&#8203;.webUserPw | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**ssl**&#8203;.keyAlias | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"https"` |
+**ssl**&#8203;.keyPassword | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"secret"` |
+**ssl**&#8203;.keystore | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**ssl**&#8203;.keystorePassword | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |  `"secret"` |
+**ssl**&#8203;.keystoreSecret | Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq* |   |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+
+## Secrets in this components
+
+If you use secrets to store credentials, please make sure that you create the secrets in the same namespace as the deployment.
+
+In this component, the nappl secret also nneeds to contain the domain of the acessing user:
+
+- account
+- password
+- domain
+
+Also, there is a second secret that can be used to store credentials for the sharepoint system. If used, it needs to comtain:
+
+- clientId
+- tenantId
+- clientCertPw
+- webUserPw
+
+The https / tls certificates are stored in a keystore to which we might need a password. You can set it by value, by env variable, by envSecret, by envconfigMap or by secret (`.Values.ssl.keystoreSecret`).
+
+If you set it by secret, please have
+
+- keyPassword (`SERVER_SSL_KEYPASSWORD`)
+- keystorePassword (`SERVER_SSL_KEYSTOREPASSWORD`)
+
+as keys in the secret.
+
diff --git a/charts/sharepoint/templates/clusteringress.tpl b/charts/sharepoint/templates/clusteringress.tpl
new file mode 100644
index 0000000..074aee9
--- /dev/null
+++ b/charts/sharepoint/templates/clusteringress.tpl
@@ -0,0 +1,22 @@
+{{- include "nplus.init" $ -}}
+{{- $name := (print .component.prefix "sharepoint-cluster") -}}
+{{- if (.Values.clusterService).enabled }}
+{{- if (.Values.clusterService).contextPath }}
+{{- include "nplus.ingress" (list . $name) | nindent 0 }}
+      - path: {{ .Values.clusterService.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ $name }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+{{- else }}
+# kind: Ingress
+# Not Generating any Ingress for {{ $name }} as the context Path is unset on component {{ .component.fullName }}
+# clusterService: {{ .Values.clusterService }}
+{{- end }}
+{{- else }}
+# kind: Ingress
+# Not Generating any Ingress for {{ $name }} as the Cluster Service is not enabled on component {{ .component.fullName }}
+# clusterService: {{ .Values.clusterService }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/sharepoint/templates/clusterservice.tpl b/charts/sharepoint/templates/clusterservice.tpl
new file mode 100644
index 0000000..5415e89
--- /dev/null
+++ b/charts/sharepoint/templates/clusterservice.tpl
@@ -0,0 +1,33 @@
+{{- include "nplus.init" $ -}}
+{{- $name := (print .component.prefix "sharepoint-cluster") -}}
+{{- if (.Values.clusterService).enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ $name }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service,
+  # access is purely through an ingress if desired.
+  type: ClusterIP
+  clusterIP: None
+
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+{{- else }}
+# kind: Service
+# Not Generating any Service for {{ $name }} as the Cluster Service is not enabled on component {{ .component.fullName }}
+# clusterService: {{ .Values.clusterService }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/sharepoint/templates/component.tpl b/charts/sharepoint/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/sharepoint/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/sharepoint/templates/ingress.tpl b/charts/sharepoint/templates/ingress.tpl
new file mode 100644
index 0000000..293d27f
--- /dev/null
+++ b/charts/sharepoint/templates/ingress.tpl
@@ -0,0 +1,16 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/sharepoint/templates/networkpolicy.tpl b/charts/sharepoint/templates/networkpolicy.tpl
new file mode 100644
index 0000000..35b47b3
--- /dev/null
+++ b/charts/sharepoint/templates/networkpolicy.tpl
@@ -0,0 +1,36 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+
+  policyTypes:
+  - Ingress
+  - Egress
+
+  ingress:
+
+  {{- if or ( include "nplus.ingressEnabled" . ) ( (.Values.clusterService).contextPath ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+
+  {{- include "nplus.networkpolicy.allowFromAdmin" . | nindent 2 }}
+  {{- include "nplus.networkpolicy.allowFromMon" . | nindent 2 }}
+
+  egress:
+  {{- include "nplus.networkpolicy.allowToNappl" . | nindent 2 }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/sharepoint/templates/pdb.tpl b/charts/sharepoint/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/sharepoint/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/sharepoint/templates/pvc.tpl b/charts/sharepoint/templates/pvc.tpl
new file mode 100644
index 0000000..b79132a
--- /dev/null
+++ b/charts/sharepoint/templates/pvc.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.pvc" . }}
diff --git a/charts/sharepoint/templates/service.tpl b/charts/sharepoint/templates/service.tpl
new file mode 100644
index 0000000..e6b19bc
--- /dev/null
+++ b/charts/sharepoint/templates/service.tpl
@@ -0,0 +1,32 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service,
+  # access is purely through an ingress if desired.
+  type: ClusterIP
+  clusterIP: None
+
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
\ No newline at end of file
diff --git a/charts/sharepoint/templates/statefulset.tpl b/charts/sharepoint/templates/statefulset.tpl
new file mode 100644
index 0000000..fa444f2
--- /dev/null
+++ b/charts/sharepoint/templates/statefulset.tpl
@@ -0,0 +1,422 @@
+{{- include "nplus.init" $ -}}
+# Component: {{ .component.chartName }}
+# will connect to:
+{{- if (.this.nappl).host }}
+#   nappl: {{ if ($.this.nappl).ssl -}}https{{- else -}}http{{- end -}}://{{ ($.this.nappl).host }}:{{ (.this.nappl).port }}/{{ (.this.nappl).instance }}
+{{- else }}
+#   defined by config file in conf PV.
+{{- end }}
+#
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+
+spec:
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: {{ .Values.replicaCount }}
+  podManagementPolicy: OrderedReady
+  updateStrategy:
+    type: {{ .Values.updateStrategy | default "OnDelete" }}  
+  minReadySeconds: 5
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.templateAffinity" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+      
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+
+      containers:
+      - name: sharepoint-connector
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+        # -- Ceyoniq does currently not define an *official* startupProbe, so we use
+        # one that quickly checks the main socket on Layer 4.
+        startupProbe:
+          initialDelaySeconds: 10
+          failureThreshold: 30
+          periodSeconds: 10
+          timeoutSeconds: 5
+          httpGet:
+            path: '/actuator/health/liveness'
+            port: {{ ($.this.management).port }}
+        livenessProbe:
+          httpGet:
+            path: '/actuator/health/liveness'
+            port: {{ ($.this.management).port }}
+          # initialDelaySeconds: 10
+        readinessProbe:
+          httpGet:
+            path: '/actuator/health/readiness'
+            port: {{ ($.this.management).port }}
+          # initialDelaySeconds: 10
+        {{- end }}
+
+        env:
+
+          # -- Management Port Settings, for Probes
+          {{- include "nplus.env" (dict 
+            "MANAGEMENT_SERVER_PORT"         ($.this.management).port
+            "MANAGEMENT_SERVER_SSL_ENABLED"  ($.this.management).ssl
+            "MANAGEMENT_SECURITY_ENABLED"    ($.this.management).security
+          ) | nindent 10 }}
+
+          #
+          # Service Settings
+          #
+
+          - name: SERVER_SERVLET_CONTEXT_PATH
+            value: {{ .Values.ingress.contextPath | quote }}
+
+          - name: LOGGING_CONFIG
+            value: "/opt/ceyoniq/sharepoint-connector/conf/log4j2.xml"
+
+          {{- if ((.Values.ingress).ssl).keystore }}
+          - name: SERVER_SSL_KEYSTORE
+            value: {{ .Values.ingress.ssl.keystore | quote }}
+          {{- end }}
+
+          {{- if or (($.this.security).zeroTrust) (eq .Values.ingress.backendProtocol "https") }}
+          - name: SERVER_SSL_ENABLED
+            value: "true"
+          - name: SERVER_PORT
+            value: {{ (.this.meta).ports.https | quote }}
+          - name: SERVER_SSL_KEYALIAS
+            value: "https"
+
+          {{- if ((.Values.ingress).ssl).keystoreSecret }}
+
+          - name: SERVER_SSL_KEYSTOREPASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Values.ingress.ssl.keystoreSecret }}
+                key: keystorePassword
+
+          - name: SERVER_SSL_KEYPASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Values.ingress.ssl.keystoreSecret }}
+                key: keyPassword
+
+          {{- else }}
+
+          {{- if ((.Values.ingress).ssl).keystorePassword }}
+          - name: SERVER_SSL_KEYSTOREPASSWORD
+            value: {{ .Values.ingress.ssl.keystorePassword | quote }}
+          {{- end }}
+          {{- if ((.Values.ingress).ssl).keyPassword }}
+          - name: SERVER_SSL_KEYPASSWORD
+            value: {{ .Values.ingress.ssl.keyPassword | quote }}
+          {{- end }}
+
+          {{- end }}
+
+          {{- if ((.Values.ingress).ssl).keyAlias }}
+          - name: SERVER_SSL_KEYALIAS
+            value: {{ .Values.ingress.ssl.keyAlias | quote }}
+          {{- end }}          
+
+          {{- else }}
+          - name: SERVER_SSL_ENABLED
+            value: "false"
+          - name: SERVER_PORT
+            value: {{ (.this.meta).ports.http | quote }}
+          {{- end }}
+
+          #
+          # NAPPL Settings
+          #
+
+          {{- if ($.this.nappl).host }}
+          - name: HOST
+            value: {{ ($.this.nappl).host | quote }}
+          {{- end }}
+          {{- if ($.this.nappl).port }}
+          - name: PORT
+            value: {{ ($.this.nappl).port | quote }}
+          - name: USESSL
+            value: "{{ if ($.this.nappl).ssl }}true{{- else -}}false{{- end -}}"
+          {{- end }}
+          {{- if ($.this.nappl).instance }}
+          - name: INSTANCE
+            value: {{ ($.this.nappl).instance | quote }}
+          {{- end }}
+
+          # -- setting the credentials for the technical user to access the application layer
+          {{- if ($.this.nappl).secret }}
+          # using a secret to get the functional nappl user for ILM
+          - name: NSCALEUSER
+            valueFrom:
+              secretKeyRef:
+                name: {{ ($.this.nappl).secret }}
+                key: account
+          - name: PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: {{ ($.this.nappl).secret }}
+                key: password
+          - name: DOMAIN
+            valueFrom:
+              secretKeyRef:
+                name: {{ ($.this.nappl).secret }}
+                key: domain
+
+          {{- else }}
+
+          {{- if ($.this.nappl).account }}
+          # Account is defined in manifest. That is ok for dev environments, but you should 
+          # switch to secrets for productive environments.
+          - name: NSCALEUSER
+            value: {{ ($.this.nappl).account }}
+          {{- else }}
+          # nappl user is not defined in manifest (and also no secret). Using the config file settings.
+          {{- end }}
+
+          {{- if ($.this.nappl).password }}
+          # The password is defined in manifest. That is ok for dev environments, but you should 
+          # switch to secrets for productive environments.
+          - name: PASSWORD
+            value: {{ ($.this.nappl).password }}
+          {{- else }}
+          # nappl password is not defined in manifest (and also no secret). Using the config file settings.
+          {{- end }}
+
+          {{- if ($.this.nappl).domain }}
+          - name: DOMAIN
+            value: {{ ($.this.nappl).domain }}
+          {{- else }}
+          # nappl password is not defined in manifest (and also no secret). Using the config file settings.
+          {{- end }}
+
+          {{- end }}
+
+          {{- if (.Values.nappl).baseFolder }}
+          - name: BASEFOLDER
+            value: {{ .Values.nappl.baseFolder | quote }}
+          {{- end }}
+
+          {{- if (.Values.nappl).docArea }}
+          - name: DOCAREA
+            value: {{ .Values.nappl.docArea | quote }}
+          {{- end }}
+       
+          #
+          # Service Settings
+          #
+          - name: DOINITIALCRAWL
+            value: {{ .Values.doInitialCrawl | quote }}
+
+          {{- if .Values.parallelRequests }}
+          - name: PARALLELREQUESTS
+            value: {{ .Values.parallelRequests | quote }}
+          {{- end }}
+
+          
+          #
+          # O365 AZURE SharePoint Settings
+          #
+          {{- if (.Values.sharepoint).doCheckOut }}
+          - name: DOCHECKOUT
+            value: {{ .Values.sharepoint.doCheckOut | quote }}
+          {{- end }}
+          {{- if (.Values.sharepoint).spHost }}
+          - name: SPHOST
+            value: {{ .Values.sharepoint.spHost | quote }}
+          {{- end }}
+          {{- if (.Values.sharepoint).triggerProperty }}
+          - name: TRIGGERPROPERTY
+            value: {{ .Values.sharepoint.triggerProperty | quote }}
+          {{- end }}
+          {{- if (.Values.sharepoint).serviceBusQueueName }}
+          - name: SERVICEBUSQUEUENAME
+            value: {{ .Values.sharepoint.serviceBusQueueName | quote }}
+          {{- end }}
+          {{- if (.Values.sharepoint).serviceBusConnectionString }}
+          - name: SERVICEBUSCONNECTIONSTRING
+            value: {{ .Values.sharepoint.serviceBusConnectionString | quote }}
+          {{- end }}
+          {{- if (.Values.sharepoint).serviceBusRetentionConnectionString }}
+          - name: SERVICEBUSRETENTIONCONNECTIONSTRING
+            value: {{ .Values.sharepoint.serviceBusRetentionConnectionString | quote }}
+          {{- end }}
+          {{- if (.Values.sharepoint).serviceBusRetentionQueueName }}
+          - name: SERVICEBUSRETENTIONQUEUENAME
+            value: {{ .Values.sharepoint.serviceBusRetentionQueueName | quote }}
+          {{- end }}
+          {{- if (.Values.sharepoint).serviceBusTopicNameConfigUpdate }}
+          - name: SERVICEBUSTOPICNAMECONFIGUPDATE
+            value: {{ .Values.sharepoint.serviceBusTopicNameConfigUpdate | quote }}
+          {{- end }}
+
+          #
+          # O365 SharePoint Credentials
+          #
+          {{- if (.Values.sharepoint).secret }}
+          # using a secret to get the functional access to SharePoint
+          - name: TENANTID
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Values.sharepoint.secret }}
+                key: tenantId
+          - name: CLIENTID
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Values.sharepoint.secret }}
+                key: clientId
+          - name: WEBUSERPW
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Values.sharepoint.secret }}
+                key: webUserPw
+          - name: CLIENTCERTPW
+            valueFrom:
+              secretKeyRef:
+                name: {{ .Values.sharepoint.secret }}
+                key: clientCertPw
+
+          {{- else }}
+
+          {{- if (.Values.sharepoint).tenantId }}
+          - name: TENANTID
+            value: {{ .Values.sharepoint.tenantId | quote }}
+          {{- end }}
+          {{- if (.Values.sharepoint).clientId }}
+          - name: CLIENTID
+            value: {{ .Values.sharepoint.clientId | quote }}
+          {{- end }}
+          {{- if (.Values.sharepoint).clientCertPw }}
+          - name: CLIENTCERTPW
+            value: {{ .Values.sharepoint.clientCertPw | quote }}
+          {{- end }}
+          {{- if (.Values.sharepoint).webUserPw }}
+          - name: WEBUSERPW
+            value: {{ .Values.sharepoint.webUserPw | quote }}
+          {{- end }}
+
+          {{- end }}
+
+          #
+          # nscale Connector Settings
+          #
+          {{- if (.Values.connector).sharePointCreatorPropertyName }}
+          - name: SHAREPOINTCREATORPROPERTYNAME
+            value: {{ .Values.connector.sharePointCreatorPropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).sharePointCreatedPropertyName }}
+          - name: SHAREPOINTCREATEDPROPERTYNAME
+            value: {{ .Values.connector.sharePointCreatedPropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).sharePointEditorPropertyName }}
+          - name: SHAREPOINTEDITORPROPERTYNAME
+            value: {{ .Values.connector.sharePointEditorPropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).sharePointEditedPropertyName }}
+          - name: SHAREPOINTEDITEDPROPERTYNAME
+            value: {{ .Values.connector.sharePointEditedPropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).sharePointChangeTokenPropertyName }}
+          - name: SHAREPOINTCHANGETOKENPROPERTYNAME
+            value: {{ .Values.connector.sharePointChangeTokenPropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).idPropertyName }}
+          - name: IDPROPERTYNAME
+            value: {{ .Values.connector.idPropertyName | quote }}
+          {{- end }}
+
+          {{- if (.Values.connector).stubIdPropertyName }}
+          - name: STUBIDPROPERTYNAME
+            value: {{ .Values.connector.stubIdPropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).stubListItemIdPropertyName }}
+          - name: STUBLISTITEMIDPROPERTYNAME
+            value: {{ .Values.connector.stubListItemIdPropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).parentIdPropertyName }}
+          - name: PARENTIDPROPERTYNAME
+            value: {{ .Values.connector.parentIdPropertyName | quote }}
+          {{- end }}
+
+          {{- if (.Values.connector).cTagPropertyName }}
+          - name: CTAGPROPERTYNAME
+            value: {{ .Values.connector.cTagPropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).eTagPropertyName }}
+          - name: ETAGPROPERTYNAME
+            value: {{ .Values.connector.eTagPropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).webUrlPropertyName }}
+          - name: WEBURLPROPERTYNAME
+            value: {{ .Values.connector.webUrlPropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).listItemIdPropertyName }}
+          - name: LISTITEMIDPROPERTYNAME
+            value: {{ .Values.connector.listItemIdPropertyName | quote }}
+          {{- end }}
+
+          {{- if (.Values.connector).nscaleRetentionPropertyName }}
+          - name: NSCALERETENTIONPROPERTYNAME
+            value: {{ .Values.connector.nscaleRetentionPropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).nscaleExpirationPropertyName }}
+          - name: NSCALEEXPIRATIONPROPERTYNAME
+            value: {{ .Values.connector.nscaleExpirationPropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).nscaleLegalHoldPropertyName }}
+          - name: NSCALELEGALHOLDPROPERTYNAME
+            value: {{ .Values.connector.nscaleLegalHoldPropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).nscaleLegalHidePropertyName }}
+          - name: NSCALELEGALHIDEPROPERTYNAME
+            value: {{ .Values.connector.nscaleLegalHidePropertyName | quote }}
+          {{- end }}
+          {{- if (.Values.connector).nscaleGdprRelevantPropertyName }}
+          - name: NSCALEGDPRRELEVANTPROPERTYNAME
+            value: {{ .Values.connector.nscaleGdprRelevantPropertyName | quote }}
+          {{- end }}
+
+        {{- include "nplus.environment" . | nindent 8 }}
+
+
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+        # -- Setting the management port for the probes to use
+        - name: management
+          containerPort: {{ required "setting the management port is required for the probes" ($.this.management).port }}
+          protocol: TCP
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+
diff --git a/charts/sharepoint/values.schema.json b/charts/sharepoint/values.schema.json
new file mode 100644
index 0000000..7c2c33f
--- /dev/null
+++ b/charts/sharepoint/values.schema.json
@@ -0,0 +1,1115 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "clusterService": {
+      "additionalProperties": false,
+      "properties": {
+        "contextPath": {
+          "default": "",
+          "description": "set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances)",
+          "title": "contextPath"
+        },
+        "enabled": {
+          "default": false,
+          "title": "enabled",
+          "type": "boolean"
+        }
+      },
+      "title": "clusterService",
+      "type": "object"
+    },
+    "connector": {
+      "additionalProperties": false,
+      "properties": {
+        "cTagPropertyName": {
+          "default": "cTag",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "cTagPropertyName"
+        },
+        "eTagPropertyName": {
+          "default": "eTag",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "eTagPropertyName"
+        },
+        "idPropertyName": {
+          "default": "sharePointId",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "idPropertyName"
+        },
+        "listItemIdPropertyName": {
+          "default": "SharePointListItemId",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "listItemIdPropertyName"
+        },
+        "nscaleExpirationPropertyName": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "nscaleExpirationPropertyName"
+        },
+        "nscaleGdprRelevantPropertyName": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "nscaleGdprRelevantPropertyName"
+        },
+        "nscaleLegalHidePropertyName": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "nscaleLegalHidePropertyName"
+        },
+        "nscaleLegalHoldPropertyName": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "nscaleLegalHoldPropertyName"
+        },
+        "nscaleRetentionPropertyName": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "nscaleRetentionPropertyName"
+        },
+        "parentIdPropertyName": {
+          "default": "sharePointParentId",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "parentIdPropertyName"
+        },
+        "sharePointChangeTokenPropertyName": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "sharePointChangeTokenPropertyName"
+        },
+        "sharePointCreatedPropertyName": {
+          "default": "SharePointCreated",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "sharePointCreatedPropertyName"
+        },
+        "sharePointCreatorPropertyName": {
+          "default": "SharePointCreator",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "sharePointCreatorPropertyName"
+        },
+        "sharePointEditedPropertyName": {
+          "default": "SharePointLastModified",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "sharePointEditedPropertyName"
+        },
+        "sharePointEditorPropertyName": {
+          "default": "SharePointEditor",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "sharePointEditorPropertyName"
+        },
+        "stubIdPropertyName": {
+          "default": "SharePointStubId",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "stubIdPropertyName"
+        },
+        "stubListItemIdPropertyName": {
+          "default": "SharePointStubListItemId",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "stubListItemIdPropertyName"
+        },
+        "webUrlPropertyName": {
+          "default": "sharePointWebUrl",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "webUrlPropertyName"
+        }
+      },
+      "title": "connector",
+      "type": "object"
+    },
+    "doInitialCrawl": {
+      "default": "false",
+      "description": "toggle initial crawling. This value is mandatory.",
+      "title": "doInitialCrawl"
+    },
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "sharepoint-connector",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullPolicy": {
+          "default": "IfNotPresent",
+          "title": "pullPolicy",
+          "type": "string"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.2.1400.2024073012",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/nscale_spc",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "javaOpts": {
+      "additionalProperties": false,
+      "description": "Options for the Java VM",
+      "properties": {
+        "javaMaxMem": {
+          "default": "",
+          "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+          "title": "javaMaxMem"
+        },
+        "javaMaxRamPercentage": {
+          "default": "",
+          "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+          "title": "javaMaxRamPercentage"
+        },
+        "javaMinMem": {
+          "default": "",
+          "description": "set the minimum memory, java will consume",
+          "title": "javaMinMem"
+        },
+        "javaMisc": {
+          "default": "",
+          "description": "Any misc Java Options that need to be passed to the container",
+          "title": "javaMisc"
+        }
+      },
+      "title": "javaOpts"
+    },
+    "management": {
+      "additionalProperties": false,
+      "properties": {
+        "port": {
+          "default": "18098",
+          "description": "see mail from Manuel, 30.7.2024",
+          "title": "port"
+        },
+        "security": {
+          "default": "false",
+          "description": "see mail from Manuel, 30.7.2024",
+          "title": "security"
+        },
+        "ssl": {
+          "default": "false",
+          "description": "see mail from Manuel, 30.7.2024",
+          "title": "ssl"
+        }
+      },
+      "title": "management",
+      "type": "object"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "description": "defines internal constants for nplus. do not change these values",
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "java",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8098",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "8498",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "sharepoint-connector",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "sharepoint",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/sharepoint-connector/conf",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/sharepoint-connector/bin/logs",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nappl": {
+      "additionalProperties": false,
+      "description": "The nscale Application Layer, this component should talk to",
+      "properties": {
+        "account": {
+          "default": "",
+          "description": "The technical account to login with",
+          "title": "account"
+        },
+        "baseFolder": {
+          "default": "",
+          "description": "The base folder, this component should write to",
+          "title": "baseFolder"
+        },
+        "docArea": {
+          "default": "",
+          "description": "The document area, this component should write to",
+          "title": "docArea"
+        },
+        "domain": {
+          "default": "",
+          "description": "The domain of the technical account",
+          "title": "domain"
+        },
+        "host": {
+          "default": "",
+          "description": "nappl host name",
+          "title": "host"
+        },
+        "instance": {
+          "default": "",
+          "description": "instance of the Application Layer, likely `instance1`",
+          "title": "instance"
+        },
+        "password": {
+          "default": "",
+          "description": "The password of the technical accunt (if not set by secret)",
+          "title": "password"
+        },
+        "port": {
+          "default": "",
+          "description": "nappl port (http 8080 or https 8443)",
+          "title": "port"
+        },
+        "secret": {
+          "default": "",
+          "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+          "title": "secret"
+        },
+        "ssl": {
+          "default": "",
+          "description": "sets the Advanced Connect to tls",
+          "title": "ssl"
+        }
+      },
+      "title": "nappl"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "parallelRequests": {
+      "default": "5",
+      "description": "amount of parallel requests",
+      "title": "parallelRequests"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "this is fix to 1 @ignore",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "sharepoint": {
+      "additionalProperties": false,
+      "properties": {
+        "clientCertPw": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "clientCertPw"
+        },
+        "clientId": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "clientId"
+        },
+        "doCheckOut": {
+          "default": "false",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "doCheckOut"
+        },
+        "secret": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "secret"
+        },
+        "serviceBusConnectionString": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "serviceBusConnectionString"
+        },
+        "serviceBusQueueName": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "serviceBusQueueName"
+        },
+        "serviceBusRetentionConnectionString": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "serviceBusRetentionConnectionString"
+        },
+        "serviceBusRetentionQueueName": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "serviceBusRetentionQueueName"
+        },
+        "serviceBusTopicNameConfigUpdate": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "serviceBusTopicNameConfigUpdate"
+        },
+        "spHost": {
+          "default": "https://example.com",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "spHost"
+        },
+        "tenantId": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "tenantId"
+        },
+        "triggerProperty": {
+          "default": "toBeArchived",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "triggerProperty"
+        },
+        "webUserPw": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "webUserPw"
+        }
+      },
+      "title": "sharepoint",
+      "type": "object"
+    },
+    "ssl": {
+      "additionalProperties": false,
+      "properties": {
+        "keyAlias": {
+          "default": "https",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "keyAlias"
+        },
+        "keyPassword": {
+          "default": "secret",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "keyPassword"
+        },
+        "keystore": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "keystore"
+        },
+        "keystorePassword": {
+          "default": "secret",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "keystorePassword"
+        },
+        "keystoreSecret": {
+          "default": "",
+          "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+          "title": "keystoreSecret"
+        }
+      },
+      "title": "ssl",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/sharepoint/values.yaml b/charts/sharepoint/values.yaml
new file mode 100644
index 0000000..8015b94
--- /dev/null
+++ b/charts/sharepoint/values.yaml
@@ -0,0 +1,517 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: true
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/nscale_spc"
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+ssl:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  keyAlias: https
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  keyPassword: secret
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  keystorePassword: secret
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  keystoreSecret:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  keystore:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/sharepoint-connector/temp"
+      - "/tmp"
+    # -- Sets the size of the temporary disk (all paths)
+    size: "1Gi"
+  # -- Sets the path to the conf files
+
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/sharepoint-connector/conf"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/sharepoint-connector/bin/logs"
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size: "1Gi"
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path:
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/sharepoint-connector/conf/apicert.pfx"
+      - "/opt/ceyoniq/sharepoint-connector/conf/apicert.pem"
+      - "/opt/ceyoniq/sharepoint-connector/conf/keystore.ks"
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+  file:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- Options for the Java VM
+javaOpts:
+  # -- set the percentage of RAM, Java will use of the total.
+  # The total amount is the amount installed in the K8s Cluster Node,
+  # OR the Memory Limit set (see resources), if any.
+  javaMaxRamPercentage:
+  # -- set the minimum memory, java will consume
+  javaMinMem:
+  # -- set the maximum memory, java will consume.
+  # Attention: This is NOT the real maximum and it does not include any non Java memory.
+  # Please read google, as this is highly discussed
+  javaMaxMem:
+  # -- Any misc Java Options that need to be passed to the container
+  javaMisc:
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: sharepoint-connector
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+  pullPolicy: IfNotPresent
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- defines internal constants for nplus.
+# do not change these values
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: sharepoint
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8098
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https: 8498
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: java
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: sharepoint-connector
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- this is fix to 1
+# @ignore
+replicaCount: 1
+sharepoint:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  spHost: https://example.com
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  serviceBusConnectionString:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  serviceBusQueueName:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  serviceBusRetentionConnectionString:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  serviceBusRetentionQueueName:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  serviceBusTopicNameConfigUpdate:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  triggerProperty: toBeArchived
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  doCheckOut: false
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  tenantId:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  clientId:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  clientCertPw:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  webUserPw:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  secret:
+# -- The nscale Application Layer, this component should talk to
+nappl:
+  # -- The base folder, this component should write to
+  baseFolder:
+  # -- The document area, this component should write to
+  docArea:
+  # -- nappl host name
+  host:
+  # -- nappl port (http 8080 or https 8443)
+  port:
+  # -- sets the Advanced Connect to tls
+  ssl:
+  # -- instance of the Application Layer, likely `instance1`
+  instance:
+  # -- The technical account to login with
+  account:
+  # -- The domain of the technical account
+  domain:
+  # -- The password of the technical accunt (if not set by secret)
+  password:
+  # -- An optional secret that holds the credentials (the keys must be `account` and `password`)
+  secret:
+# -- toggle initial crawling. This value is mandatory.
+doInitialCrawl: "false"
+# -- amount of parallel requests
+parallelRequests: 5
+connector:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  sharePointCreatorPropertyName: "SharePointCreator"
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  sharePointCreatedPropertyName: SharePointCreated
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  sharePointEditorPropertyName: SharePointEditor
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  sharePointEditedPropertyName: SharePointLastModified
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  sharePointChangeTokenPropertyName:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  idPropertyName: sharePointId
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  stubIdPropertyName: SharePointStubId
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  stubListItemIdPropertyName: SharePointStubListItemId
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  parentIdPropertyName: sharePointParentId
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  cTagPropertyName: cTag
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  eTagPropertyName: eTag
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  webUrlPropertyName: sharePointWebUrl
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  listItemIdPropertyName: SharePointListItemId
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  nscaleRetentionPropertyName:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  nscaleExpirationPropertyName:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  nscaleLegalHoldPropertyName:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  nscaleLegalHidePropertyName:
+  # -- Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*
+  nscaleGdprRelevantPropertyName:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: component
+  # -- adds extra Annotations to the service
+  annotations:
+clusterService:
+  enabled: false
+  # -- set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances)
+  contextPath:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+management:
+  # -- see mail from Manuel, 30.7.2024
+  port: "18098"
+  # -- see mail from Manuel, 30.7.2024
+  ssl: "false"
+  # -- see mail from Manuel, 30.7.2024
+  security: "false"
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/web/Chart.yaml b/charts/web/Chart.yaml
new file mode 100644
index 0000000..75c776f
--- /dev/null
+++ b/charts/web/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-web
+description: nscale Web, providing a modern Web UI to nscale users
+icon: data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4KPHN2ZyB2ZXJzaW9uPSIxLjEiIGlkPSJFYmVuZV8xIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB4PSIwcHgiIHk9IjBweCIKCSB2aWV3Qm94PSIwIDAgNTEuMDI0IDUxLjAyNCIgZW5hYmxlLWJhY2tncm91bmQ9Im5ldyAwIDAgNTEuMDI0IDUxLjAyNCIgeG1sOnNwYWNlPSJwcmVzZXJ2ZSI+CjxnPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIzMi4zMjIsMTkuNzQ0IDIwLjY0OSwxOS43NDQgMTguNTkxLDMxLjQxNyAzMC4yNjQsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iNDcuMTg1LDE5Ljc0NCAzNS41MTIsMTkuNzQ0IDMzLjQ1NCwzMS40MTcgNDUuMTI2LDMxLjQxNyAJIi8+Cgk8cG9seWdvbiBmaWxsPSIjQTRCRkU0IiBwb2ludHM9IjI5Ljc2NiwzNC41NTEgMTguMDk0LDM0LjU1MSAxNi4wMzUsNDYuMjI0IDI3LjcwOCw0Ni4yMjQgCSIvPgoJPHBvbHlnb24gZmlsbD0iI0E0QkZFNCIgcG9pbnRzPSIxNy41NywxOS43NDQgNS44OTcsMTkuNzQ0IDMuODM5LDMxLjQxNyAxNS41MTIsMzEuNDE3IAkiLz4KCTxwb2x5Z29uIGZpbGw9IiNBNEJGRTQiIHBvaW50cz0iMzUuMTUsNC43OTkgMjMuNDc3LDQuNzk5IDIxLjQxOSwxNi40NzIgMzMuMDkyLDE2LjQ3MiAJIi8+Cjwvc3ZnPgo=
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/web/README.md b/charts/web/README.md
new file mode 100644
index 0000000..bdb69e0
--- /dev/null
+++ b/charts/web/README.md
@@ -0,0 +1,198 @@
+
+
+# nplus-component-web
+
+nscale Web, providing a modern Web UI to nscale users
+
+## tls / https
+
+nscale Web is **not** automatically enabling tls / https and also does currently **not** automatically generate a certificate for tls.
+
+However, the nplus Web Chart does, and stores it in `conf/keystore.jks`. Additionally, if there is no `server.xml` in the conf directory, nplus copies a custom `server.xml` to conf, that has tls enabled and references `conf/keystore.jks`.
+
+If you already have a running web componenent, and want to use tls with web, you will need to edit this file manually. See ITSMSD-8772.
+
+## nplus-component-web Chart Configuration
+
+You can customize / configure nplus-component-web by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+authType | Set the authentication type login, basic, negotiate, implicit ntlmv2, kerberos |   |
+customizingMode | If this setting is enabled, layouts will update immediately when changes are made. It is no longer necessary to re-register or restart the service. If this setting is not activated, the automatic update of the metamodel is turned off. We recommend not using this setting in productive systems because it reduces system performance. |   |
+disableUsernamePassword | surpresses the login dialog |   |
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"application-layer-web"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+immediateFederatedLogin | directly log in via identity providers |   |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/nscale_web"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |  `"XtConLoadBalancerSession"` |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**javaOpts**&#8203;.javaMaxMem | set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed |   |
+**javaOpts**&#8203;.javaMaxRamPercentage | set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any. |   |
+**javaOpts**&#8203;.javaMinMem | set the minimum memory, java will consume |   |
+**javaOpts**&#8203;.javaMisc | Any misc Java Options that need to be passed to the container |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"java"` |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8090` |
+**meta**&#8203;.ports&#8203;.https | The tls / https port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8453` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"web-client"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"web"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+metamodelMode | Refreshes the metamodel mode |   |
+minReplicaCount | if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas. |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-server/application-layer-web/conf"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.defaultConfig | Sets a configMap with default configuration files that get copied to a new and empty container just before the template folder gets copied. Existing files are not overwritten. |  `"{{ .component.fullName }}-defaultconfig"` |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.logs&#8203;.medium | the medium for the emptyDisk volume if you unset it, it drops it from the manifest |   |
+**mounts**&#8203;.logs&#8203;.path | Sets the path to the log files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-server/application-layer-web/apache/logs/"` |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |  `"5Gi"` |
+**mounts**&#8203;.temp&#8203;.paths | Sets a list of paths to the temporary files <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-server/application-layer-web/apache/work/Catalina/localhost", "/opt/ceyoniq/nscale-server/application-layer-web/apache/conf/Catalina/localhost", "/opt/ceyoniq/nscale-server/application-layer-web/apache/webapps", "/opt/ceyoniq/nscale-server/application-layer-web/apache/temp"]` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"1Gi"` |
+nameOverride | This overrides the output of the internal name function |   |
+**nappl**&#8203;.account | The technical account to login with |   |
+**nappl**&#8203;.domain | The domain of the technical account |   |
+**nappl**&#8203;.host | nappl host name |   |
+**nappl**&#8203;.instance | instance of the Application Layer, likely `instance1` |   |
+**nappl**&#8203;.password | The password of the technical accunt (if not set by secret) |   |
+**nappl**&#8203;.port | nappl port (http 8080 or https 8443) |   |
+**nappl**&#8203;.secret | An optional secret that holds the credentials (the keys must be `account` and `password`) |   |
+**nappl**&#8203;.ssl | sets the Advanced Connect to tls |   |
+nodeSelector | select specific nodes for this component |   |
+oauthDomains | OAuth nscale domains |   |
+replicaCount | Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1. |  `1` |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+sameSite | nscale SameSite Cookie Header |   |
+samlDomains | SAML nscale domains |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+smartCrossgrade | Enable Crossgrade for Smart Layouts |   |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+updateStrategy | the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures. |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+
diff --git a/charts/web/templates/component.tpl b/charts/web/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/web/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/web/templates/defaultconfig.tpl b/charts/web/templates/defaultconfig.tpl
new file mode 100644
index 0000000..24601f9
--- /dev/null
+++ b/charts/web/templates/defaultconfig.tpl
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ .component.fullName }}-defaultconfig
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+data:
+{{- range $path, $bytes := .Files.Glob "defaultconfig/*" }}
+{{- base $path | nindent 2 }}: |
+{{- tpl ($.Files.Get $path) $ | nindent 4 }}
+{{- end }}
diff --git a/charts/web/templates/deployment.tpl b/charts/web/templates/deployment.tpl
new file mode 100644
index 0000000..0b59c44
--- /dev/null
+++ b/charts/web/templates/deployment.tpl
@@ -0,0 +1,199 @@
+{{- include "nplus.init" $ -}}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  {{- if not .Values.autoScale }}
+  replicas: {{ .Values.replicaCount }}
+  {{- end }}
+  strategy:
+    type: {{ .Values.updateStrategy | default "RollingUpdate" }}  
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.templateAffinity" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+
+
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+
+      # nscale Web does not enable tls / https by default. 
+      # TODO: observe ITSMSD-8772
+      # So we need to perform the steps described in the manual to enable it.
+      # We will do this, if this is a new installation (and the keystore does not exist yet)
+      - name: enable-https
+        image: {{ include "nplus.image" (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        {{- include "nplus.initResources" . | nindent 8 }}
+        command: [ "/bin/sh", "-c" ]
+        args:
+        - |
+          set -e
+          KEYSTORE="/mnt/conf/keystore.jks"
+          KEYPASS="changeit"
+
+          if [ ! -f "$KEYSTORE" ]; then
+          echo "Creating input for keytool"
+          cat << EOM > /tmp/keyinput
+          $KEYPASS
+          $KEYPASS
+          {{ .this.ingress.domain }}
+          Development Department
+          42i GmbH
+          Bad Lippspringe
+          NRW
+          DE
+          yes
+          EOM
+          echo "Creating Keystore at $KEYSTORE using $KEYTOOL"
+          keytool -genkeypair -alias tomcat -keyalg RSA -keystore $KEYSTORE < /tmp/keyinput
+          else
+          echo "Keystore at $KEYSTORE already exists. Leaving as is."
+          fi
+          echo "Done."
+        volumeMounts:
+        - name: conf
+          subPath: {{ .component.storagePath | quote }}
+          mountPath: /mnt/conf
+        - name: temp
+          mountPath: /tmp
+
+      containers:
+      - name: web-client
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+          {{- if ($.this.nappl).host }}
+          - name: NSCALE_HOST
+            value: {{ ($.this.nappl).host | quote }}
+          {{- end }}
+          {{- if ($.this.nappl).port }}
+          - name: NSCALE_PORT
+            value: {{ ($.this.nappl).port | quote }}
+          {{- end }}
+          {{- if ($.this.nappl).ssl }}
+          - name: NSCALE_SSL
+            value: {{ ($.this.nappl).ssl | quote }}
+          {{- end }}
+          {{- if ($.this.nappl).instance }}
+          - name: NSCALE_INSTANCE
+            value: {{ ($.this.nappl).instance | quote }}
+          {{- end }}
+
+          - name: LOG4JCONFIGLOCATION
+            value: "../conf/log4j/nscale_stdout_log_conf.xml"
+
+          {{- if .Values.metamodelMode }}
+          - name: REFRESH_METAMODEL_MODE
+            value: {{ .Values.metamodelMode | quote }}
+          {{- end }}
+          {{- if .Values.sameSite }}
+          - name: NSACLE_SAMESITE
+            value: {{ .Values.sameSite | quote }}
+          {{- end }}
+          {{- if .Values.disableUsernamePassword }}
+          - name: NSCALE_DISABLEUSERNAMEPASSWORD
+            value: {{ .Values.disableUsernamePassword | quote }}
+          {{- end }}
+          {{- if .Values.oauthDomains }}
+          - name: NSCALE_OAUTH_DOMAINS
+            value: {{ .Values.oauthDomains | quote }}
+          {{- end }}
+          {{- if .Values.samlDomains }}
+          - name: NSCALE_SAML_DOMAINS
+            value: {{ .Values.samlDomains | quote }}
+          {{- end }}
+          {{- if .Values.immediateFederatedLogin }}
+          - name: NSCALE_IMMEDIATE_FEDERATED_LOGIN
+            value: {{ .Values.immediateFederatedLogin | quote }}
+          {{- end }}
+          {{- if .Values.samlDomains }}
+          - name: NSCALE_ENABLE_SAML
+            value: {{ if .Values.samlDomains }}"true"{{ else }}"false"{{ end }}
+          {{- end }}
+          {{- if .Values.oauthDomains }}
+          - name: NSCALE_ENABLE_OAUTH
+            value: {{ if .Values.oauthDomains }}"true"{{ else }}"false"{{ end }}
+          {{- end }}
+          {{- if .Values.authType }}
+          - name: NSCALE_AUTHTYPE
+            value: {{ .Values.authType | quote }}
+          {{- end }}
+          {{- if .Values.authType }}
+          - name: NSCALE_SMART_CROSSGRADE
+            value: {{ .Values.smartCrossgrade | quote }}
+          {{- end }}
+          {{- if .Values.customizingMode }}
+          - name: NSCALE_CUSTOMIZINGMODE
+            value: {{ if .Values.customizingMode }}"true"{{ else }}"false"{{ end }}
+          {{- end }}
+
+          {{ include "nplus.appDynamicsEnv" . | nindent 10 }}
+
+        {{- include "nplus.environment" . | nindent 8 }}
+
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+        startupProbe:
+          httpGet:
+            path: /nscale_web/systemConfiguration.xml
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          initialDelaySeconds: 10
+          failureThreshold: 30
+          periodSeconds: 10
+          timeoutSeconds: 5
+        livenessProbe:
+          httpGet:
+            path: /nscale_web/systemConfiguration.xml
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          periodSeconds: 10
+          timeoutSeconds: 2
+        readinessProbe:
+          httpGet:
+            path: /nscale_web/systemConfiguration.xml
+            port: {{ include "nplus.backendPort" . }}
+            scheme: {{ include "nplus.backendProtocol" . | upper }}
+          periodSeconds: 10
+          timeoutSeconds: 2
+        {{- end }}
+        
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+
+
diff --git a/charts/web/templates/ingress.tpl b/charts/web/templates/ingress.tpl
new file mode 100644
index 0000000..32f7ef3
--- /dev/null
+++ b/charts/web/templates/ingress.tpl
@@ -0,0 +1,16 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
diff --git a/charts/web/templates/networkpolicy.tpl b/charts/web/templates/networkpolicy.tpl
new file mode 100644
index 0000000..a9f00aa
--- /dev/null
+++ b/charts/web/templates/networkpolicy.tpl
@@ -0,0 +1,35 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+
+  policyTypes:
+  - Ingress
+  - Egress
+
+  ingress:
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+  {{- include "nplus.networkpolicy.allowFromAdmin" . | nindent 2 }}
+  {{- include "nplus.networkpolicy.allowFromMon" . | nindent 2 }}
+
+  egress:
+  {{- include "nplus.networkpolicy.allowToNappl" . | nindent 2 }}
+{{- end }}
diff --git a/charts/web/templates/pdb.tpl b/charts/web/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/web/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/web/templates/pvc.tpl b/charts/web/templates/pvc.tpl
new file mode 100644
index 0000000..b79132a
--- /dev/null
+++ b/charts/web/templates/pvc.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.pvc" . }}
diff --git a/charts/web/templates/service.tpl b/charts/web/templates/service.tpl
new file mode 100644
index 0000000..6bff67f
--- /dev/null
+++ b/charts/web/templates/service.tpl
@@ -0,0 +1,34 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service,
+  # access is purely through an ingress if desired.
+  type: ClusterIP
+  clusterIP: None
+
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
+
diff --git a/charts/web/values.schema.json b/charts/web/values.schema.json
new file mode 100644
index 0000000..6a1a180
--- /dev/null
+++ b/charts/web/values.schema.json
@@ -0,0 +1,909 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "authType": {
+      "default": "",
+      "description": "Set the authentication type login, basic, negotiate, implicit ntlmv2, kerberos",
+      "title": "authType"
+    },
+    "customizingMode": {
+      "default": "",
+      "description": "If this setting is enabled, layouts will update immediately when changes are made. It is no longer necessary to re-register or restart the service. If this setting is not activated, the automatic update of the metamodel is turned off. We recommend not using this setting in productive systems because it reduces system performance.",
+      "title": "customizingMode"
+    },
+    "disableUsernamePassword": {
+      "default": "",
+      "description": "surpresses the login dialog",
+      "title": "disableUsernamePassword"
+    },
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "application-layer-web",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.3.1300.2024121620",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "immediateFederatedLogin": {
+      "default": "",
+      "description": "directly log in via identity providers",
+      "title": "immediateFederatedLogin"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/nscale_web",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "XtConLoadBalancerSession",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "javaOpts": {
+      "additionalProperties": false,
+      "description": "Options for the Java VM",
+      "properties": {
+        "javaMaxMem": {
+          "default": "",
+          "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+          "title": "javaMaxMem"
+        },
+        "javaMaxRamPercentage": {
+          "default": "",
+          "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+          "title": "javaMaxRamPercentage"
+        },
+        "javaMinMem": {
+          "default": "",
+          "description": "set the minimum memory, java will consume",
+          "title": "javaMinMem"
+        },
+        "javaMisc": {
+          "default": "",
+          "description": "Any misc Java Options that need to be passed to the container",
+          "title": "javaMisc"
+        }
+      },
+      "title": "javaOpts"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "description": "defines internal constants for nplus. do not change these values",
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "java",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8090",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "8453",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "web-client",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "web",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta"
+    },
+    "metamodelMode": {
+      "default": "",
+      "description": "Refreshes the metamodel mode",
+      "title": "metamodelMode"
+    },
+    "minReplicaCount": {
+      "default": "",
+      "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+      "title": "minReplicaCount"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-server/application-layer-web/conf",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "defaultConfig": {
+          "default": "{{ .component.fullName }}-defaultconfig",
+          "description": "Sets a configMap with default configuration files that get copied to a new and empty container just before the template folder gets copied. Existing files are not overwritten.",
+          "title": "defaultConfig"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "medium": {
+              "default": "",
+              "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+              "title": "medium"
+            },
+            "path": {
+              "default": "/opt/ceyoniq/nscale-server/application-layer-web/apache/logs/",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "5Gi",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nappl": {
+      "additionalProperties": false,
+      "description": "The nscale Application Layer, this component should talk to",
+      "properties": {
+        "account": {
+          "default": "",
+          "description": "The technical account to login with",
+          "title": "account"
+        },
+        "domain": {
+          "default": "",
+          "description": "The domain of the technical account",
+          "title": "domain"
+        },
+        "host": {
+          "default": "",
+          "description": "nappl host name",
+          "title": "host"
+        },
+        "instance": {
+          "default": "",
+          "description": "instance of the Application Layer, likely `instance1`",
+          "title": "instance"
+        },
+        "password": {
+          "default": "",
+          "description": "The password of the technical accunt (if not set by secret)",
+          "title": "password"
+        },
+        "port": {
+          "default": "",
+          "description": "nappl port (http 8080 or https 8443)",
+          "title": "port"
+        },
+        "secret": {
+          "default": "",
+          "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+          "title": "secret"
+        },
+        "ssl": {
+          "default": "",
+          "description": "sets the Advanced Connect to tls",
+          "title": "ssl"
+        }
+      },
+      "title": "nappl"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "oauthDomains": {
+      "default": "",
+      "description": "OAuth nscale domains",
+      "title": "oauthDomains"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "sameSite": {
+      "default": "",
+      "description": "nscale SameSite Cookie Header",
+      "title": "sameSite"
+    },
+    "samlDomains": {
+      "default": "",
+      "description": "SAML nscale domains",
+      "title": "samlDomains"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "smartCrossgrade": {
+      "default": "",
+      "description": "Enable Crossgrade for Smart Layouts",
+      "title": "smartCrossgrade"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "updateStrategy": {
+      "default": "",
+      "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+      "title": "updateStrategy"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/web/values.yaml b/charts/web/values.yaml
new file mode 100644
index 0000000..fcc4f21
--- /dev/null
+++ b/charts/web/values.yaml
@@ -0,0 +1,510 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: true
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie: XtConLoadBalancerSession
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/nscale_web"
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# -- Sets the number of replicas in this replicaSet.
+# Some Components (like nstl or sharepoint) only allow a count of 1.
+replicaCount: 1
+# -- the update Strategy for this component. Normally, you can update all components
+# rolling, except for nappl, where you need to follow the documented update procedures.
+updateStrategy:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+      - /opt/ceyoniq/nscale-server/application-layer-web/apache/work/Catalina/localhost
+      - /opt/ceyoniq/nscale-server/application-layer-web/apache/conf/Catalina/localhost
+      - /opt/ceyoniq/nscale-server/application-layer-web/apache/webapps
+      - /opt/ceyoniq/nscale-server/application-layer-web/apache/temp
+    # -- Sets the size of the temporary disk (all paths)
+    size: "1Gi"
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-server/application-layer-web/conf"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-server/application-layer-web/apache/logs/"
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size: "5Gi"
+    # -- the medium for the emptyDisk volume
+    # if you unset it, it drops it from the manifest
+    medium:
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path:
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- Sets a configMap with default configuration files that get copied
+  # to a new and empty container just before the template folder gets copied.
+  # Existing files are not overwritten.
+  defaultConfig: "{{ .component.fullName }}-defaultconfig"
+  data:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+  file:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- Options for the Java VM
+javaOpts:
+  # -- set the percentage of RAM, Java will use of the total.
+  # The total amount is the amount installed in the K8s Cluster Node,
+  # OR the Memory Limit set (see resources), if any.
+  javaMaxRamPercentage:
+  # -- set the minimum memory, java will consume
+  javaMinMem:
+  # -- set the maximum memory, java will consume.
+  # Attention: This is NOT the real maximum and it does not include any non Java memory.
+  # Please read google, as this is highly discussed
+  javaMaxMem:
+  # -- Any misc Java Options that need to be passed to the container
+  javaMisc:
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: application-layer-web
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- defines internal constants for nplus.
+# do not change these values
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: web
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8090
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https: 8453
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: java
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: web-client
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Enable Crossgrade for Smart Layouts
+smartCrossgrade:
+# -- Refreshes the metamodel mode
+metamodelMode:
+# -- nscale SameSite Cookie Header
+sameSite:
+# -- surpresses the login dialog
+disableUsernamePassword:
+# -- OAuth nscale domains
+oauthDomains:
+# -- SAML nscale domains
+samlDomains:
+# -- directly log in via identity providers
+immediateFederatedLogin:
+# -- Set the authentication type
+# login, basic, negotiate, implicit
+# ntlmv2, kerberos
+authType:
+# -- If this setting is enabled, layouts will update immediately when changes are made. It is no longer necessary to re-register or restart the service. If this setting is not activated, the automatic update of the metamodel is turned off.
+# We recommend not using this setting in productive systems because it reduces system performance.
+customizingMode:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- The nscale Application Layer, this component should talk to
+nappl:
+  # -- nappl host name
+  host:
+  # -- nappl port (http 8080 or https 8443)
+  port:
+  # -- sets the Advanced Connect to tls
+  ssl:
+  # -- instance of the Application Layer, likely `instance1`
+  instance:
+  # -- The technical account to login with
+  account:
+  # -- The domain of the technical account
+  domain:
+  # -- The password of the technical accunt (if not set by secret)
+  password:
+  # -- An optional secret that holds the credentials (the keys must be `account` and `password`)
+  secret:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCount, a podDesruptionBudget will be created with this value as
+# minAvailable, using the full component as selector. This is useful for components, that are
+# using multiple replicas.
+minReplicaCount:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/charts/webdav/Chart.yaml b/charts/webdav/Chart.yaml
new file mode 100644
index 0000000..abf0c37
--- /dev/null
+++ b/charts/webdav/Chart.yaml
@@ -0,0 +1,11 @@
+apiVersion: v2
+name: nplus-component-webdav
+description: nscale WebDAV Connector, providing a standard WebDAV interface to the Instance
+icon: data:image/svg+xml;base64,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
+type: application
+dependencies:
+  - name: nplus-globals
+    alias: globals
+    version: "*-0"
+    repository: "file://../globals"
+version: 1.0.0
diff --git a/charts/webdav/README.md b/charts/webdav/README.md
new file mode 100644
index 0000000..c169a17
--- /dev/null
+++ b/charts/webdav/README.md
@@ -0,0 +1,183 @@
+
+
+# nplus-component-webdav
+
+nscale WebDAV Connector, providing a standard WebDAV interface to the Instance
+
+## Usage
+
+`https://empty.lab.nplus.cloud/dav/nscalealinst1/Sample`
+
+## nplus-component-webdav Chart Configuration
+
+You can customize / configure nplus-component-webdav by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+env | Sets additional environment variables for the configuration. |   |
+envMap | Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container. |   |
+envSecret | Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container. |   |
+fullnameOverride | This overrides the output of the internal fullname function |   |
+**image**&#8203;.name | the name of the image to use |  `"webdav-connector"` |
+**image**&#8203;.pullSecrets | you can provide your own pullSecrets, in case you use a private repo. |  `["nscale-cr", "nplus-cr"]` |
+**image**&#8203;.repo | if you use a private repo, feel free to set it here |  `"ceyoniq.azurecr.io/release/nscale"` |
+**image**&#8203;.tag | the tag of the image to use |  `"latest"` |
+**ingress**&#8203;.annotations | Adds extra Annotations to the ingress |   |
+**ingress**&#8203;.backendProtocol | Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically. |  `http` <br> `https` in zero trust mode |
+**ingress**&#8203;.class | The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one |  `public` |
+**ingress**&#8203;.contextPath | The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts. |  `"/dav"` |
+**ingress**&#8203;.cookie | on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web |   |
+**ingress**&#8203;.deny | deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client. |   |
+**ingress**&#8203;.domain | Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here |   |
+**ingress**&#8203;.enabled | You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not. |  `true` |
+**ingress**&#8203;.namespace | Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list |  "ingress,  kube-system,  ingress-nginx" |
+**ingress**&#8203;.proxyReadTimeout | Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set. |   |
+**ingress**&#8203;.secret | Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance |  `{{ .this.ingress.domain }}-tls` |
+**ingress**&#8203;.whitelist | optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers |   |
+**javaOpts**&#8203;.javaMaxMem | set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed |   |
+**javaOpts**&#8203;.javaMaxRamPercentage | set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any. |   |
+**javaOpts**&#8203;.javaMinMem | set the minimum memory, java will consume |   |
+**javaOpts**&#8203;.javaMisc | Any misc Java Options that need to be passed to the container |   |
+**meta**&#8203;.language | Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container. |  `"java"` |
+**meta**&#8203;.ports&#8203;.http | The http port this component uses (if any). In zero trust mode, this will be disabled. <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8088` |
+**meta**&#8203;.ports&#8203;.https | The tls / https port, this component uses (if any) <br>this is a constant value of the component and should not be changed. | **info only**, do not change<br> `8488` |
+**meta**&#8203;.provider | sets provider (partner, reseller) information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.serviceContainer | The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any |  `"webdav-connector"` |
+**meta**&#8203;.stage | A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example) |   |
+**meta**&#8203;.tenant | sets tenant information to be able to invoice per use in a cloud environment |   |
+**meta**&#8203;.type | the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service. |  `"webdav"` |
+**meta**&#8203;.wave | Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation |   |
+minReplicaCount | if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas. |   |
+minReplicaCountType | if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer |   |
+**mounts**&#8203;.caCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.caCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.configMap | Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.componentCerts&#8203;.secret | Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting |   |
+**mounts**&#8203;.conf&#8203;.path | Sets the path to the conf files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-webdav/conf"` |
+**mounts**&#8203;.data&#8203;.class | Sets the class of the data disk |   |
+**mounts**&#8203;.data&#8203;.size | Sets the size of the data disk |   |
+**mounts**&#8203;.data&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.disk&#8203;.class | Sets the class of the disk |   |
+**mounts**&#8203;.disk&#8203;.enabled | enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk. |  `false` |
+**mounts**&#8203;.disk&#8203;.migration | Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten! |  `false` |
+**mounts**&#8203;.disk&#8203;.size | Sets the size of the disk |   |
+**mounts**&#8203;.disk&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.file&#8203;.class | Sets the class of the shared disk |   |
+**mounts**&#8203;.file&#8203;.size | Sets the size of the shared disk |   |
+**mounts**&#8203;.file&#8203;.volumeName | If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one |   |
+**mounts**&#8203;.generic | Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container. |   |
+**mounts**&#8203;.logs&#8203;.path | Sets the path to the log files <br>do not change this value | **info only**, do not change<br> `"/opt/ceyoniq/nscale-webdav/logs"` |
+**mounts**&#8203;.logs&#8203;.size | Sets the size of the log disk (all paths) |  `"1Gi"` |
+**mounts**&#8203;.temp&#8203;.paths | Sets a list of paths to the temporary files <br>do not change this value | **info only**, do not change<br> `["/opt/ceyoniq/nscale-webdav/temp", "/opt/ceyoniq/nscale-webdav/apache/temp", "/tmp"]` |
+**mounts**&#8203;.temp&#8203;.size | Sets the size of the temporary disk (all paths) |  `"1Gi"` |
+nameOverride | This overrides the output of the internal name function |   |
+**nappl**&#8203;.account | The technical account to login with |   |
+**nappl**&#8203;.domain | The domain of the technical account |   |
+**nappl**&#8203;.host | nappl host name |   |
+**nappl**&#8203;.instance | instance of the Application Layer, likely `instance1` |   |
+**nappl**&#8203;.password | The password of the technical accunt (if not set by secret) |   |
+**nappl**&#8203;.port | nappl port (http 8080 or https 8443) |   |
+**nappl**&#8203;.secret | An optional secret that holds the credentials (the keys must be `account` and `password`) |   |
+**nappl**&#8203;.ssl | sets the Advanced Connect to tls |   |
+nodeSelector | select specific nodes for this component |   |
+replicaCount | Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1. |  `1` |
+**resources**&#8203;.limits&#8203;.cpu | The maximum allowed CPU for the container |   |
+**resources**&#8203;.limits&#8203;.memory | The maximum allowed RAM for the container |   |
+**resources**&#8203;.requests&#8203;.cpu | Set the share of guaranteed CPU to the container. |   |
+**resources**&#8203;.requests&#8203;.memory | Set the share of guaranteed RAM to the container |   |
+**security**&#8203;.containerSecurityContext&#8203;.allowPrivilegeEscalation | Some functionality may need the possibility to allow privilege escalation. This should be very restrictive <br>you should not change this | **info only**, do not change<br> `false` |
+**security**&#8203;.containerSecurityContext&#8203;.readOnlyRootFilesystem | sets the container root file system to read only. This should be the case in production environment <br>you should not change this | **info only**, do not change<br> `true` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroup | The file system group as which new files are created <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.podSecurityContext&#8203;.fsGroupChangePolicy | Under which condition should the fsGroup be changed <br>there is normally no need to change this | **info only**, do not change<br> `"OnRootMismatch"` |
+**security**&#8203;.podSecurityContext&#8203;.runAsUser | The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security <br>there is normally no need to change this | **info only**, do not change<br> `1001` |
+**security**&#8203;.zeroTrust | turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes |  `false` |
+**service**&#8203;.annotations | adds extra Annotations to the service |   |
+**service**&#8203;.enabled | enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress. |  `true` |
+**service**&#8203;.selector | The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type |  `"component"` |
+**telemetry**&#8203;.openTelemetry | turns Open Telemetry on |   |
+**telemetry**&#8203;.serviceName | Sets the service name for the telemetry service to more convenient identify the displayed component Example: "{{ .this.meta.type }}-{{ .instance.name }}" |   |
+**template**&#8203;.annotations | set additional annotations for pods |   |
+**template**&#8203;.labels | set additional labels for pods |   |
+terminationGracePeriodSeconds | Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults |   |
+timezone | set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc. |  `Europe/Berlin` |
+tolerations | Set tolerations for this component |   |
+updateStrategy | the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures. |   |
+**utils**&#8203;.debug | Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide |  `false` |
+**utils**&#8203;.disableWait | in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet. |  `false` |
+**utils**&#8203;.disableWave | If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet. |  `false` |
+**utils**&#8203;.includeNamespace | By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later |  `true` |
+**utils**&#8203;.maintenance | in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up. |  `false` |
+**utils**&#8203;.renderComments | You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD |  `true` |
+waitFor | Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed. |   |
+
diff --git a/charts/webdav/templates/component.tpl b/charts/webdav/templates/component.tpl
new file mode 100644
index 0000000..54ff97e
--- /dev/null
+++ b/charts/webdav/templates/component.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.component" . -}}
diff --git a/charts/webdav/templates/deployment.tpl b/charts/webdav/templates/deployment.tpl
new file mode 100644
index 0000000..79f8573
--- /dev/null
+++ b/charts/webdav/templates/deployment.tpl
@@ -0,0 +1,123 @@
+{{- include "nplus.init" $ -}}
+# Component: {{ .component.chartName }}
+# will connect to:
+{{- if (.this.nappl).host }}
+#   nappl: {{ if ($.this.nappl).ssl -}}https{{- else -}}http{{- end -}}://{{ ($.this.nappl).host }}:{{ (.this.nappl).port }}/{{ (.this.nappl).instance }}
+{{- else }}
+#   defined by config file in conf PV.
+{{- end }}
+#
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+
+spec:
+  selector:
+    matchLabels:
+      {{- include "nplus.selectorLabels" . | nindent 6 }}
+  replicas: {{ .Values.replicaCount }}
+  strategy:
+    type: RollingUpdate
+
+  template:
+    metadata:
+      labels:
+        {{- include "nplus.templateLabels" . | nindent 8 }}
+      annotations:
+        {{- include "nplus.templateAnnotations" . | nindent 8 }}
+        {{- include "nplus.securityAnnotations" . | nindent 8 }}
+    spec:
+      {{- include "nplus.imagePullSecrets" . | nindent 6 }}
+      {{- include "nplus.securityIllumioReadinessGates" . | nindent 6 }}
+      {{- include "nplus.podSecurityContext" . | nindent 6 }}
+      {{- include "nplus.templateAffinity" . | nindent 6 }}
+      {{- include "nplus.terminationGracePeriodSeconds" . | nindent 6 }}
+      
+      initContainers:
+      {{- include "nplus.waitFor" . | nindent 6 }}
+      {{- include "nplus.copyConfig" . | nindent 6 }}
+
+      containers:
+      - name: webdav-connector
+        image: {{ include "nplus.image"  (dict "global" .Values.global "image" .Values.image) }}
+        imagePullPolicy: {{ include "nplus.imagePullPolicy" .Values.image }}
+        {{- include "nplus.containerSecurityContext" . | nindent 8 }}
+        env:
+
+          {{- if ($.this.nappl).host }}
+          - name: WEBDAV_AL_HOST
+            value: {{ ($.this.nappl).host | quote }}
+          {{- end }}
+          {{- if ($.this.nappl).port }}
+          - name: WEBDAV_AL_PORT
+            value: {{ ($.this.nappl).port | quote }}
+          {{- end }}
+          {{- if ($.this.nappl).ssl }}
+          - name: WEBDAV_AL_SSL
+            value: {{ ($.this.nappl).ssl | quote }}
+          {{- end }}
+          {{- if ($.this.nappl).instance }}
+          - name: WEBDAV_AL_INSTANCE
+            value: {{ ($.this.nappl).instance | quote }}
+          {{- end }}
+
+        {{- include "nplus.environment" . | nindent 8 }}
+
+        {{- if .this.utils.maintenance }}
+          {{- include "nplus.idle" . | nindent 8 }}
+        {{- else }}
+# TODO Das hier funktioniert nicht. Es kommt eine 401 zurück. Das ist gut, wird aber als Fehler gesehen.
+# Die Ceyoniq hat hier auch noch die Probe auskommentiert: 
+# https://github.com/ceyoniq/container/blob/main/kubernetes/kustomize/nscale/base/webdav-connector.yaml
+#         readinessProbe:
+#           httpGet:
+#             path: /dav
+#             port: 8088
+#           initialDelaySeconds: 20
+#           periodSeconds: 10
+        # -- Ceyoniq does currently not define an *official* startupProbe, so we use
+        # one that quickly checks the main socket on Layer 4.
+        startupProbe:
+          initialDelaySeconds: 10
+          failureThreshold: 30
+          periodSeconds: 10
+          timeoutSeconds: 5
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+        # -- Ceyoniq does currently not define an *official* readynessProbe, so we use
+        # one that quickly checks the main socket on Layer 4.
+        readinessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          # initialDelaySeconds: 10
+          periodSeconds: 10
+        # -- Ceyoniq does currently not define an *official* livenessProbe, so we use
+        # one that quickly checks the main socket on Layer 4.
+        livenessProbe:
+          tcpSocket:
+            port: {{ include "nplus.backendPort" . }}
+          # initialDelaySeconds: 10
+          periodSeconds: 10
+        {{- end }}
+
+        ports:
+        {{- include "nplus.defaultContainerPorts" . | nindent 8 }}
+
+        {{- include "nplus.resources" . | nindent 8 }}
+
+        volumeMounts:
+        {{- include "nplus.defaultMounts" . | nindent 8 }}
+
+      volumes:
+      {{- include "nplus.defaultVolumes" . | nindent 6 }}
+
diff --git a/charts/webdav/templates/ingress.tpl b/charts/webdav/templates/ingress.tpl
new file mode 100644
index 0000000..293d27f
--- /dev/null
+++ b/charts/webdav/templates/ingress.tpl
@@ -0,0 +1,16 @@
+{{- include "nplus.init" $ -}}
+{{- if ( include "nplus.ingressEnabled" . ) }}
+{{- include "nplus.ingress" (list . .component.fullName) | nindent 0 }}
+      - path: {{ .Values.ingress.contextPath }}
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .component.fullName }}
+            port: 
+              name: {{ include "nplus.backendProtocol" . }}
+{{- else }}
+# kind: ingress
+# Not Generating any Ingress for {{ .component.fullName }} as
+# Ingress = {{ .this.ingress }}
+# Service = {{ .this.service }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/webdav/templates/networkpolicy.tpl b/charts/webdav/templates/networkpolicy.tpl
new file mode 100644
index 0000000..149ce45
--- /dev/null
+++ b/charts/webdav/templates/networkpolicy.tpl
@@ -0,0 +1,35 @@
+{{- include "nplus.init" $ -}}
+{{- if ((.this.security).cni).createNetworkPolicy }}
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: {{ .component.fullName }}
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+    {{- include "nplus.selectorLabels" . | nindent 6 }}
+
+  policyTypes:
+  - Ingress
+  - Egress
+
+  ingress:
+
+  {{- if ( include "nplus.ingressEnabled" . ) }}
+  {{- include "nplus.networkpolicy.allowFromIngress" . | nindent 2 }}
+  {{- end }}
+  {{- include "nplus.networkpolicy.allowFromAdmin" . | nindent 2 }}
+  {{- include "nplus.networkpolicy.allowFromMon" . | nindent 2 }}
+
+  egress:
+  {{- include "nplus.networkpolicy.allowToNappl" . | nindent 2 }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/webdav/templates/pdb.tpl b/charts/webdav/templates/pdb.tpl
new file mode 100644
index 0000000..ce31727
--- /dev/null
+++ b/charts/webdav/templates/pdb.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.podDisruptionBudget" . -}}
diff --git a/charts/webdav/templates/pvc.tpl b/charts/webdav/templates/pvc.tpl
new file mode 100644
index 0000000..b79132a
--- /dev/null
+++ b/charts/webdav/templates/pvc.tpl
@@ -0,0 +1,2 @@
+{{- include "nplus.init" $ -}}
+{{- include "nplus.pvc" . }}
diff --git a/charts/webdav/templates/service.tpl b/charts/webdav/templates/service.tpl
new file mode 100644
index 0000000..babecac
--- /dev/null
+++ b/charts/webdav/templates/service.tpl
@@ -0,0 +1,32 @@
+{{- include "nplus.init" $ -}}
+apiVersion: v1
+kind: Service
+metadata:
+  {{- if .this.utils.includeNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
+  name: {{ .component.fullName }}
+  labels:
+    {{- include "nplus.instanceLabels" . | nindent 4 }}
+  annotations:
+    {{- include "nplus.argoWave" . | nindent 4 }}
+    {{- include "nplus.annotations" . | nindent 4 }}
+    {{- include "nplus.securityAnnotations" . | nindent 4 }}
+    {{- include "nplus.serviceAnnotations" . | nindent 4 }}
+spec:
+  # this is a "headless service", no cluster IP is defined
+  # as none of the internal components need to access this service,
+  # access is purely through an ingress if desired.
+  type: ClusterIP
+  clusterIP: None
+  ports:
+    {{- include "nplus.defaultServicePorts" . | nindent 4 }}
+  selector:
+  {{- if eq .this.service.selector "component" }}
+    {{- include "nplus.selectorLabels" . | nindent 4 }}
+  {{- else if eq .this.service.selector "type" }}
+    {{- include "nplus.selectorLabelsNc" . | nindent 4 }}
+  {{- else }}
+    {{- fail (printf "Unknown Service Selector Type: %s - must be component or type" .this.service.selector) }}
+  {{- end }}
+
diff --git a/charts/webdav/values.schema.json b/charts/webdav/values.schema.json
new file mode 100644
index 0000000..06f0041
--- /dev/null
+++ b/charts/webdav/values.schema.json
@@ -0,0 +1,856 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "env": {
+      "default": "",
+      "description": "Sets additional environment variables for the configuration.",
+      "title": "env"
+    },
+    "envMap": {
+      "default": "",
+      "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+      "title": "envMap"
+    },
+    "envSecret": {
+      "default": "",
+      "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+      "title": "envSecret"
+    },
+    "fullnameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal fullname function",
+      "title": "fullnameOverride"
+    },
+    "global": {
+      "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+      "title": "global",
+      "type": "object"
+    },
+    "globals": {
+      "description": "nplus Global Functions Library Chart",
+      "properties": {
+        "global": {
+          "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+          "title": "global",
+          "type": "object"
+        }
+      },
+      "title": "nplus-globals",
+      "type": "object"
+    },
+    "image": {
+      "additionalProperties": false,
+      "description": "provide the image to be used for this component",
+      "properties": {
+        "name": {
+          "default": "webdav-connector",
+          "description": "the name of the image to use",
+          "title": "name"
+        },
+        "pullPolicy": {
+          "default": "IfNotPresent",
+          "title": "pullPolicy",
+          "type": "string"
+        },
+        "pullSecrets": {
+          "description": "you can provide your own pullSecrets, in case you use a private repo.",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "title": "pullSecrets"
+        },
+        "repo": {
+          "default": "ceyoniq.azurecr.io/release/nscale",
+          "description": "if you use a private repo, feel free to set it here",
+          "title": "repo"
+        },
+        "tag": {
+          "default": "ubi.9.3.1000.2024091609",
+          "description": "the tag of the image to use",
+          "title": "tag"
+        }
+      },
+      "title": "image"
+    },
+    "ingress": {
+      "additionalProperties": false,
+      "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "Adds extra Annotations to the ingress",
+          "title": "annotations"
+        },
+        "backendProtocol": {
+          "default": "`http` <br> `https` in zero trust mode",
+          "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+          "title": "backendProtocol"
+        },
+        "class": {
+          "default": "`public`",
+          "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+          "title": "class"
+        },
+        "contextPath": {
+          "default": "/dav",
+          "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+          "title": "contextPath"
+        },
+        "cookie": {
+          "default": "",
+          "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+          "title": "cookie"
+        },
+        "deny": {
+          "default": "",
+          "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+          "title": "deny"
+        },
+        "domain": {
+          "default": "",
+          "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+          "title": "domain"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+          "title": "enabled"
+        },
+        "inputPath": {
+          "default": "",
+          "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+          "title": "inputPath"
+        },
+        "namespace": {
+          "default": "\"ingress, kube-system, ingress-nginx\"",
+          "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+          "title": "namespace"
+        },
+        "proxyReadTimeout": {
+          "default": "",
+          "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+          "title": "proxyReadTimeout"
+        },
+        "rewriteTarget": {
+          "default": "",
+          "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+          "title": "rewriteTarget"
+        },
+        "secret": {
+          "default": "`{{ .this.ingress.domain }}-tls`",
+          "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+          "title": "secret"
+        },
+        "whitelist": {
+          "default": "",
+          "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+          "title": "whitelist"
+        }
+      },
+      "title": "ingress"
+    },
+    "javaOpts": {
+      "additionalProperties": false,
+      "description": "Options for the Java VM",
+      "properties": {
+        "javaMaxMem": {
+          "default": "",
+          "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+          "title": "javaMaxMem"
+        },
+        "javaMaxRamPercentage": {
+          "default": "",
+          "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+          "title": "javaMaxRamPercentage"
+        },
+        "javaMinMem": {
+          "default": "",
+          "description": "set the minimum memory, java will consume",
+          "title": "javaMinMem"
+        },
+        "javaMisc": {
+          "default": "",
+          "description": "Any misc Java Options that need to be passed to the container",
+          "title": "javaMisc"
+        }
+      },
+      "title": "javaOpts"
+    },
+    "meta": {
+      "additionalProperties": false,
+      "description": "defines internal constants for nplus. do not change these values",
+      "properties": {
+        "componentVersion": {
+          "default": "",
+          "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+          "title": "componentVersion"
+        },
+        "language": {
+          "default": "java",
+          "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+          "title": "language"
+        },
+        "ports": {
+          "additionalProperties": false,
+          "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+          "properties": {
+            "http": {
+              "default": "8088",
+              "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+              "title": "http"
+            },
+            "https": {
+              "default": "8488",
+              "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "https"
+            },
+            "rmi": {
+              "default": "",
+              "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "rmi"
+            },
+            "tcp": {
+              "default": "",
+              "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcp"
+            },
+            "tcps": {
+              "default": "",
+              "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+              "title": "tcps"
+            }
+          },
+          "title": "ports"
+        },
+        "provider": {
+          "default": "",
+          "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+          "title": "provider"
+        },
+        "serviceContainer": {
+          "default": "webdav-connector",
+          "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+          "title": "serviceContainer"
+        },
+        "stage": {
+          "default": "",
+          "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+          "title": "stage"
+        },
+        "tenant": {
+          "default": "",
+          "description": "sets tenant information to be able to invoice per use in a cloud environment",
+          "title": "tenant"
+        },
+        "type": {
+          "default": "webdav",
+          "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+          "title": "type"
+        },
+        "wave": {
+          "default": "",
+          "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+          "title": "wave"
+        }
+      },
+      "title": "meta"
+    },
+    "minReplicaCount": {
+      "default": "",
+      "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+      "title": "minReplicaCount"
+    },
+    "minReplicaCountType": {
+      "default": "",
+      "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+      "title": "minReplicaCountType"
+    },
+    "mounts": {
+      "additionalProperties": false,
+      "properties": {
+        "caCerts": {
+          "additionalProperties": false,
+          "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the certs folder. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "caCerts"
+        },
+        "componentCerts": {
+          "additionalProperties": false,
+          "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+          "properties": {
+            "configMap": {
+              "default": "",
+              "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+              "title": "configMap"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets the path to the component certs. @internal -- do not change this value",
+              "title": "paths"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+              "title": "secret"
+            }
+          },
+          "title": "componentCerts"
+        },
+        "conf": {
+          "additionalProperties": false,
+          "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-webdav/conf",
+              "description": "Sets the path to the conf files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "conf"
+        },
+        "data": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the data disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the data files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the data disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "data",
+          "type": "object"
+        },
+        "disk": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the disk",
+              "title": "class"
+            },
+            "enabled": {
+              "default": "false",
+              "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+              "title": "enabled"
+            },
+            "migration": {
+              "default": "false",
+              "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+              "title": "migration"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the disk files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the data files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "disk",
+          "type": "object"
+        },
+        "file": {
+          "additionalProperties": false,
+          "properties": {
+            "class": {
+              "default": "",
+              "description": "Sets the class of the shared disk",
+              "title": "class"
+            },
+            "path": {
+              "default": "",
+              "description": "Sets the path to the shared files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "",
+              "description": "Sets the size of the shared disk",
+              "title": "size"
+            },
+            "volumeName": {
+              "default": "",
+              "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+              "title": "volumeName"
+            }
+          },
+          "title": "file",
+          "type": "object"
+        },
+        "fonts": {
+          "additionalProperties": false,
+          "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "fonts"
+        },
+        "generic": {
+          "default": "",
+          "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+          "title": "generic"
+        },
+        "license": {
+          "additionalProperties": false,
+          "description": "some nscale Components require a license file and this defines it's location",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the license files @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "license"
+        },
+        "logs": {
+          "additionalProperties": false,
+          "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+          "properties": {
+            "path": {
+              "default": "/opt/ceyoniq/nscale-webdav/logs",
+              "description": "Sets the path to the log files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths to the log files @internal -- do not change this value",
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the log disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "logs"
+        },
+        "pool": {
+          "additionalProperties": false,
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+              "title": "path"
+            }
+          },
+          "title": "pool",
+          "type": "object"
+        },
+        "ptemp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "default": "",
+              "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+              "title": "paths"
+            }
+          },
+          "title": "ptemp"
+        },
+        "temp": {
+          "additionalProperties": false,
+          "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+          "properties": {
+            "path": {
+              "default": "",
+              "description": "Sets the path to the temporary files @internal -- do not change this value",
+              "title": "path"
+            },
+            "paths": {
+              "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "title": "paths"
+            },
+            "size": {
+              "default": "1Gi",
+              "description": "Sets the size of the temporary disk (all paths)",
+              "title": "size"
+            }
+          },
+          "title": "temp"
+        }
+      },
+      "title": "mounts",
+      "type": "object"
+    },
+    "nameOverride": {
+      "default": "",
+      "description": "This overrides the output of the internal name function",
+      "title": "nameOverride"
+    },
+    "nappl": {
+      "additionalProperties": false,
+      "description": "The nscale Application Layer, this component should talk to",
+      "properties": {
+        "account": {
+          "default": "",
+          "description": "The technical account to login with",
+          "title": "account"
+        },
+        "domain": {
+          "default": "",
+          "description": "The domain of the technical account",
+          "title": "domain"
+        },
+        "host": {
+          "default": "",
+          "description": "nappl host name",
+          "title": "host"
+        },
+        "instance": {
+          "default": "",
+          "description": "instance of the Application Layer, likely `instance1`",
+          "title": "instance"
+        },
+        "password": {
+          "default": "",
+          "description": "The password of the technical accunt (if not set by secret)",
+          "title": "password"
+        },
+        "port": {
+          "default": "",
+          "description": "nappl port (http 8080 or https 8443)",
+          "title": "port"
+        },
+        "secret": {
+          "default": "",
+          "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+          "title": "secret"
+        },
+        "ssl": {
+          "default": "",
+          "description": "sets the Advanced Connect to tls",
+          "title": "ssl"
+        }
+      },
+      "title": "nappl"
+    },
+    "nodeSelector": {
+      "default": "",
+      "description": "select specific nodes for this component",
+      "title": "nodeSelector"
+    },
+    "replicaCount": {
+      "default": "1",
+      "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+      "title": "replicaCount"
+    },
+    "resources": {
+      "additionalProperties": false,
+      "description": "Assigns hardware resources to container",
+      "properties": {
+        "limits": {
+          "additionalProperties": false,
+          "description": "Limits the maximum resources",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "The maximum allowed CPU for the container",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "The maximum allowed RAM for the container",
+              "title": "memory"
+            }
+          },
+          "title": "limits"
+        },
+        "requests": {
+          "additionalProperties": false,
+          "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+          "properties": {
+            "cpu": {
+              "default": "",
+              "description": "Set the share of guaranteed CPU to the container.",
+              "title": "cpu"
+            },
+            "memory": {
+              "default": "",
+              "description": "Set the share of guaranteed RAM to the container",
+              "title": "memory"
+            }
+          },
+          "title": "requests"
+        }
+      },
+      "title": "resources"
+    },
+    "security": {
+      "additionalProperties": false,
+      "description": "Security Section defining default runtime environment for your container",
+      "properties": {
+        "containerSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "allowPrivilegeEscalation": {
+              "default": "false",
+              "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+              "title": "allowPrivilegeEscalation"
+            },
+            "capabilities": {
+              "additionalProperties": false,
+              "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+              "properties": {
+                "drop": {
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "drop",
+                  "type": "array"
+                }
+              },
+              "title": "capabilities"
+            },
+            "readOnlyRootFilesystem": {
+              "default": "true",
+              "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+              "title": "readOnlyRootFilesystem"
+            }
+          },
+          "title": "containerSecurityContext",
+          "type": "object"
+        },
+        "podSecurityContext": {
+          "additionalProperties": false,
+          "properties": {
+            "fsGroup": {
+              "default": "1001",
+              "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+              "title": "fsGroup"
+            },
+            "fsGroupChangePolicy": {
+              "default": "OnRootMismatch",
+              "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+              "title": "fsGroupChangePolicy"
+            },
+            "runAsUser": {
+              "default": "1001",
+              "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+              "title": "runAsUser"
+            }
+          },
+          "title": "podSecurityContext",
+          "type": "object"
+        },
+        "zeroTrust": {
+          "default": "`false`",
+          "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+          "title": "zeroTrust"
+        }
+      },
+      "title": "security"
+    },
+    "service": {
+      "additionalProperties": false,
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "adds extra Annotations to the service",
+          "title": "annotations"
+        },
+        "enabled": {
+          "default": "true",
+          "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+          "title": "enabled"
+        },
+        "selector": {
+          "default": "component",
+          "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+          "title": "selector"
+        }
+      },
+      "title": "service",
+      "type": "object"
+    },
+    "telemetry": {
+      "additionalProperties": false,
+      "description": "Settings for telemetry tools",
+      "properties": {
+        "openTelemetry": {
+          "default": "",
+          "description": "turns Open Telemetry on",
+          "title": "openTelemetry"
+        },
+        "serviceName": {
+          "default": "",
+          "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+          "title": "serviceName"
+        }
+      },
+      "title": "telemetry"
+    },
+    "template": {
+      "additionalProperties": false,
+      "description": "provide extra settings for pod templates",
+      "properties": {
+        "annotations": {
+          "default": "",
+          "description": "set additional annotations for pods",
+          "title": "annotations"
+        },
+        "labels": {
+          "default": "",
+          "description": "set additional labels for pods",
+          "title": "labels"
+        }
+      },
+      "title": "template"
+    },
+    "terminationGracePeriodSeconds": {
+      "default": "",
+      "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+      "title": "terminationGracePeriodSeconds"
+    },
+    "timezone": {
+      "default": "`Europe/Berlin`",
+      "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+      "title": "timezone"
+    },
+    "tolerations": {
+      "default": "",
+      "description": "Set tolerations for this component",
+      "title": "tolerations"
+    },
+    "updateStrategy": {
+      "default": "",
+      "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+      "title": "updateStrategy"
+    },
+    "utils": {
+      "additionalProperties": false,
+      "properties": {
+        "debug": {
+          "default": "`false`",
+          "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+          "title": "debug"
+        },
+        "disableWait": {
+          "default": "`false`",
+          "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+          "title": "disableWait"
+        },
+        "disableWave": {
+          "default": "`false`",
+          "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+          "title": "disableWave"
+        },
+        "includeNamespace": {
+          "default": "`true`",
+          "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+          "title": "includeNamespace"
+        },
+        "maintenance": {
+          "default": "`false`",
+          "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+          "title": "maintenance"
+        },
+        "renderComments": {
+          "default": "`true`",
+          "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+          "title": "renderComments"
+        }
+      },
+      "title": "utils",
+      "type": "object"
+    },
+    "waitFor": {
+      "default": "",
+      "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+      "title": "waitFor"
+    }
+  },
+  "type": "object"
+}
diff --git a/charts/webdav/values.yaml b/charts/webdav/values.yaml
new file mode 100644
index 0000000..52c2f36
--- /dev/null
+++ b/charts/webdav/values.yaml
@@ -0,0 +1,428 @@
+# yaml-language-server: $schema=values.schema.json
+# -- Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)
+ingress:
+  # -- You can toggle the ingress on wether you'd like this component
+  # to be reachable through an ingress or not.
+  enabled: true
+  # -- Overrides the default backend protocol. The default is http,
+  # unless in zeroTrust Mode, then it is switched to https automatically.
+  # @default -- `http` <br> `https` in zero trust mode
+  backendProtocol:
+  # -- defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1(/\|$)(.*)`
+  # @internal -- This is an alpha feature - do not use it.
+  inputPath:
+  # -- defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason
+  # Example: `/nscalealinst1/$2`
+  # @internal -- This is an alpha feature - do not use it.
+  rewriteTarget:
+  # -- deny is used to exclude specific paths from public access, such as
+  # administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is
+  # the burlap protocol. The configuration service is the endpoint used by
+  # the Admin client.
+  deny:
+  # -- on component level, set cookie affinity for the ingress
+  # example: `XtConLoadBalancerSession` for nscale Web
+  cookie:
+  # -- Sets the name of the tls secret to be used for this ingress, that contains
+  # the private and public key. These secrets can optionally be provided by the instance
+  # @default -- `{{ .this.ingress.domain }}-tls`
+  secret:
+  # -- Sets the domain to be used. This domain should be provided by the instance globally
+  # for all components, but you are free to override it here
+  domain:
+  # -- The ingressclass to use for this ingress. Most likely, this is provided globally by the 
+  # instance, but you are free to override it here if this component should use a different class
+  # e.g. if you have separated ingress controllers, like a public and an internal one
+  # @default -- `public`
+  class:
+  # -- optionally sets a whitelist of ip ranges (CIDR format, comma separated)
+  # from which ingress is allowed. This is an annotation for nginx, so won't work with other
+  # ingress controllers
+  whitelist:
+  # -- Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy
+  # to allow traffic from this namespace to our pods. This may be a comma separated list
+  # @default -- "ingress, kube-system, ingress-nginx"
+  namespace:
+  # -- The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the
+  # most though this is only a constant used in the scripts.
+  contextPath: "/dav"
+  # -- Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.
+  proxyReadTimeout:
+  # -- Adds extra Annotations to the ingress
+  annotations:
+# -- Sets the number of replicas in this replicaSet.
+# Some Components (like nstl or sharepoint) only allow a count of 1.
+replicaCount: 1
+# -- the update Strategy for this component. Normally, you can update all components
+# rolling, except for nappl, where you need to follow the documented update procedures.
+updateStrategy:
+# -- Security Section defining default runtime environment for your container
+security:
+  podSecurityContext:
+    # -- The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context
+    # for security
+    # @internal -- there is normally no need to change this
+    runAsUser: 1001
+    # -- The file system group as which new files are created
+    # @internal -- there is normally no need to change this
+    fsGroup: 1001
+    # -- Under which condition should the fsGroup be changed
+    # @internal -- there is normally no need to change this
+    fsGroupChangePolicy: OnRootMismatch
+  containerSecurityContext:
+    # -- sets the container root file system to read only. This should be the case in production environment
+    # @internal -- you should not change this
+    readOnlyRootFilesystem: true
+    # -- Some functionality may need the possibility to allow privilege escalation. This should be very restrictive
+    # @internal -- you should not change this
+    allowPrivilegeEscalation: false
+    # -- Capabilities this container should have. Only allow the necessity, and drop as many as possible
+    # @internal -- you should not change this
+    capabilities:
+      drop:
+        - ALL
+  # -- turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes
+  # @default -- `false`
+  zeroTrust:
+# # <id>:
+# #   path: <the path in the container, where you want to mount this>
+# #   volumeName: <the name of the PV to be mounted>
+# #   subPath: <an (optional) subpath to be used inside the PV>
+
+mounts:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  temp:
+    # -- Sets the path to the temporary files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the temporary files
+    # @internal -- do not change this value
+    paths:
+      - "/opt/ceyoniq/nscale-webdav/temp"
+      - "/opt/ceyoniq/nscale-webdav/apache/temp"
+      - "/tmp"
+    # -- Sets the size of the temporary disk (all paths)
+    size: "1Gi"
+  # -- Sets the path to the conf files
+
+  # -- The conf volume is a RWX volume mounted by the environment, that holds
+  # all configurations of all instances and components in this environment
+  conf:
+    # -- Sets the path to the conf files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-webdav/conf"
+    # -- Sets a list of paths to the conf files
+    # @internal -- do not change this value
+    paths:
+  # -- The log volume is used to take any left-over logging in the container.
+  # The container should log to stdout, but if any component still tries to log to disk
+  # this disk needs to be writeable
+  logs:
+    # -- Sets the path to the log files
+    # @internal -- do not change this value
+    path: "/opt/ceyoniq/nscale-webdav/logs"
+    # -- Sets a list of paths to the log files
+    # @internal -- do not change this value
+    paths:
+    # -- Sets the size of the log disk (all paths)
+    size: "1Gi"
+  # -- some nscale Components require a license file and this
+  # defines it's location
+  license:
+    # -- Sets the path to the license files
+    # @internal -- do not change this value
+    path:
+  # -- If you want to use additional
+  # fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the
+  # fonts directory from the environment pool
+  fonts:
+    # -- Sets the path to the fonts folder.
+    # @internal -- do not change this value
+    path:
+  # -- You can add a file with trusted Root Certificates (e.g. Azure), to be able to
+  # connect to alien services via https. If you have a self-signed root certificate,
+  # you can also add it here.
+  caCerts:
+    # -- Sets the path to the certs folder.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  # -- the java based nscale components have their own certificates, that you might want to upload.
+  # You can normally do so via the environment configuration, but should you want to use a secret,
+  # you can set it here
+  componentCerts:
+    # -- Sets the path to the component certs.
+    # @internal -- do not change this value
+    paths:
+    # -- Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting
+    secret:
+    # -- Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting
+    configMap:
+  data:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the data disk
+    size:
+    # -- Sets the class of the data disk
+    class:
+    # -- Sets the path to the data files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+  file:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- Sets the size of the shared disk
+    size:
+    # -- Sets the class of the shared disk
+    class:
+    # -- Sets the path to the shared files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the shared files
+    # @internal -- do not change this value
+    paths:
+  pool:
+    # -- Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted.
+    # this is used to store scripts, apps and assets that are required to deploy an application / solution
+    # @internal -- do not change this value
+    path:
+  # -- The temp volume is used to hold any superflues and temporary data.
+  # it is deleted when the pod terminates. However, it is extremely important
+  # as all pods filesystems are read only
+  ptemp:
+    # -- Sets the path for temporary files that are persisted
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths for temporary files that are persisted
+    # @internal -- do not change this value
+    paths:
+  # -- Allows to define generic mounts of pre-provisioned PVs into any container.
+  # This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+  generic:
+  disk:
+    # -- Sets the size of the disk
+    size:
+    # -- Sets the class of the disk
+    class:
+    # -- Sets the path to the disk files
+    # @internal -- do not change this value
+    path:
+    # -- Sets a list of paths to the data files
+    # @internal -- do not change this value
+    paths:
+    # -- If you do not want to have a Volume created by the provisioner,
+    # you can set the name of your volume here to attach to this pre-existing one
+    volumeName:
+    # -- enables the use of the second data disk. If enabled, all paths defined will end up on this disk.
+    # In case of the (default) disabled, the paths will be added to the primaty data disk.
+    enabled: false
+    # -- Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk.
+    # This is done only once and only if there is legacy data at all. No files are overwritten!
+    migration: false
+# -- Options for the Java VM
+javaOpts:
+  # -- set the percentage of RAM, Java will use of the total.
+  # The total amount is the amount installed in the K8s Cluster Node,
+  # OR the Memory Limit set (see resources), if any.
+  javaMaxRamPercentage:
+  # -- set the minimum memory, java will consume
+  javaMinMem:
+  # -- set the maximum memory, java will consume.
+  # Attention: This is NOT the real maximum and it does not include any non Java memory.
+  # Please read google, as this is highly discussed
+  javaMaxMem:
+  # -- Any misc Java Options that need to be passed to the container
+  javaMisc:
+# -- provide the image to be used for this component
+image:
+  # -- you can provide your own pullSecrets, in case you use
+  # a private repo.
+  pullSecrets:
+    - nscale-cr
+    - nplus-cr
+  # -- the name of the image to use
+  name: webdav-connector
+  # -- the tag of the image to use
+  tag: latest
+  # -- if you use a private repo, feel free to set it here
+  repo: ceyoniq.azurecr.io/release/nscale
+  pullPolicy: IfNotPresent
+# -- set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl)
+# etc.
+# @default -- `Europe/Berlin`
+timezone:
+# -- defines internal constants for nplus.
+# do not change these values
+meta:
+  # -- the type of the component. You should not change this value, except if
+  # you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner*
+  # This type is used to create cluster communication for nappl and nstl and potentially
+  # group multiple replicaSets into one service.
+  type: webdav
+  # -- lists the ports this component exposes. This is important for zero trust mode and others.
+  ports:
+    # -- The http port this component uses (if any). In zero trust mode, this will be disabled.
+    # @internal -- this is a constant value of the component and should not be changed.
+    http: 8088
+    # -- The tls / https port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    https: 8488
+    # -- A potential tcp port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcp:
+    # -- A potential rmi port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    rmi:
+    # -- A potential tls / tcps port, this component uses (if any)
+    # @internal -- this is a constant value of the component and should not be changed.
+    tcps:
+  # -- sets tenant information to be able to invoice per use in a cloud environment
+  tenant:
+  # -- sets provider (partner, reseller) information to be able to invoice per use in a cloud environment
+  provider:
+  # -- Sets the wave in which this component should be deployed within an ArgoCD deployment
+  # if unset, it uses the default wave thus all components are installed in one wave, then relying
+  # on correct wait settings just like in a helm installation
+  wave:
+  # -- Sets the language of the main service (in the *service* container). This is used for instance
+  # if you turn OpenTelemetry on, to know which Agent to inject into the container.
+  language: java
+  # -- The container name of the main service for this component. This is used to define where to
+  # inject the telemetry agents, if any
+  serviceContainer: webdav-connector
+  # -- A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment
+  # runs in. This can be used in template functions to add the stage to for instance the service name of
+  # telemetry services like open telemetry. (see telemetry example)
+  stage:
+  # -- This is the version of the component, used for display
+  # @internal -- set by devOps pipeline, so do not modify
+  componentVersion:
+# -- Set tolerations for this component
+tolerations:
+# -- select specific nodes for this component
+nodeSelector:
+# -- Sets the name of a secret, which holds additional environment variables for
+# the configuration. It is added as envFrom secretRef to the container.
+envSecret:
+# -- Sets the name of a configMap, which holds additional environment variables for
+# the configuration. It is added as envFrom configMap to the container.
+envMap:
+# -- Sets additional environment variables for
+# the configuration.
+env:
+# -- The nscale Application Layer, this component should talk to
+nappl:
+  # -- nappl host name
+  host:
+  # -- nappl port (http 8080 or https 8443)
+  port:
+  # -- sets the Advanced Connect to tls
+  ssl:
+  # -- instance of the Application Layer, likely `instance1`
+  instance:
+  # -- The technical account to login with
+  account:
+  # -- The domain of the technical account
+  domain:
+  # -- The password of the technical accunt (if not set by secret)
+  password:
+  # -- An optional secret that holds the credentials (the keys must be `account` and `password`)
+  secret:
+# -- Assigns hardware resources to container
+resources:
+  # -- Requests are used to assign a minimum to a container. This is the guaranteed amount
+  requests:
+    # -- Set the share of guaranteed CPU to the container.
+    cpu:
+    # -- Set the share of guaranteed RAM to the container
+    memory:
+  # -- Limits the maximum resources
+  limits:
+    # -- The maximum allowed CPU for the container
+    cpu:
+    # -- The maximum allowed RAM for the container
+    memory:
+# -- This overrides the output of the internal name function
+nameOverride:
+# -- This overrides the output of the internal fullname function
+fullnameOverride:
+utils:
+  # -- Turn debugging *on* will give you stack trace etc. 
+  # Please check out the Chart Developer Guide
+  # @default -- `false`
+  debug:
+  # -- You can turn Comment rendering *on* to get descriptive information inside the manifests. It
+  # will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD
+  # @default -- `true`
+  renderComments:
+  # -- By default, the namespace is rendered into the manifest. However, if you want to use
+  # `helm template` and store manifests for later applying them to multiple namespaces, you might
+  # want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later
+  # @default -- `true`
+  includeNamespace:
+  # -- in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the
+  # pods will start in idle, not starting the service at all. This will allow you to gain access to the container
+  # to perform recovery and maintenance tasks while having the real container up.
+  # @default -- `false`
+  maintenance:
+  # -- If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components
+  # of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components
+  # while previous waves are not finished yet.
+  # @default -- `false`
+  disableWave:
+  # -- in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are
+  # only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might
+  # start components even if they are not intended to run yet.
+  # @default -- `false`
+  disableWait:
+service:
+  # -- enables the service to be consumed by group components and a potential ingress
+  # Disabling the service also disables the ingress.
+  enabled: true
+  # -- The selector can be `component` or `type`
+  # *component* selects only pods that are in the replicaset.
+  # *type* selects any pod that has the given type
+  selector: "component"
+  # -- adds extra Annotations to the service
+  annotations:
+# -- Defines a list of conditions that need to be met before this components starts.
+# The condition must be a network port that opens, when the master component is ready.
+# Mostly, this will be a service, since a component is only added to a service if the 
+# probes succeed.
+waitFor:
+# -- if you set minReplicaCount, a podDesruptionBudget will be created with this value as
+# minAvailable, using the full component as selector. This is useful for components, that are
+# using multiple replicas.
+minReplicaCount:
+# -- if you set minReplicaCountType, a podDesruptionBudget will be created with this value as
+# minAvailable, using the component type as selector. This is useful for components, that are spread
+# across multiple replicaSets, like sharepoint or storage layer
+minReplicaCountType:
+# -- provide extra settings for pod templates
+template:
+  # -- set additional annotations for pods
+  annotations:
+  # -- set additional labels for pods
+  labels:
+# -- Settings for telemetry tools
+telemetry:
+  # -- turns Open Telemetry on
+  openTelemetry:
+  # -- Sets the service name for the telemetry service to more convenient
+  # identify the displayed component
+  # Example: "{{ .this.meta.type }}-{{ .instance.name }}"
+  serviceName:
+# -- Sets the terminationGracePeriodSeconds for the component
+# If not set, it uses the Kubernetes defaults
+terminationGracePeriodSeconds:
diff --git a/dsl/README.md b/dsl/README.md
new file mode 100644
index 0000000..7eedafc
--- /dev/null
+++ b/dsl/README.md
@@ -0,0 +1,38 @@
+# DSL
+
+https://structurizr.com/dsl
+
+# Strukturizr Lite
+
+```
+docker run -it --rm -p 8080:8080 -v $(pwd):/usr/local/structurizr structurizr/lite
+```
+
+# Export
+
+```
+https://github.com/structurizr/puppeteer
+```
+
+Install
+
+```
+brew install node
+npm i puppeteer
+```
+
+Export
+
+```
+node export-diagrams.js http://localhost:8080/workspace/diagrams svg
+```
+
+## K8s Theme:
+
+https://structurizr.com/help/theme?url=https://static.structurizr.com/themes/kubernetes-v0.3/theme.json
+
+
+## Shapes
+
+https://docs.structurizr.com/ui/diagrams/notation
+
diff --git a/dsl/adminserver.dsl b/dsl/adminserver.dsl
new file mode 100644
index 0000000..5837ccf
--- /dev/null
+++ b/dsl/adminserver.dsl
@@ -0,0 +1,32 @@
+adminserver = softwareSystem "nplus Remote Management Server" {
+    tags "nplus"
+    description "Layer 4 Proxy with RMS to simulate a classic environment to allow offline configuration"
+
+    replicaset = Container "ReplicaSet" "StatefulSet Replica 1" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        main = component "RMS Container" "Container Template with official Image" {
+            technology "Java"
+            tags "nplus"
+            -> nplus.confpvc "mount global Instance conf"
+            -> nstlA.svc "remote Administration"
+            -> nstlB.svc "remote Administration"
+            -> rs.svc "remote Administration"
+            -> nappl.svc "remote Administration"
+            -> nappljobs.svc "remote Administration"
+            -> pipelinercm.svc "remote Administration"
+            -> pipelinerac.svc "remote Administration"
+            -> ilm.svc "remote Administration"
+            -> cmis.svc "remote Administration"
+            -> mon.svc "remote Administration"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+    l3lb = Container "LoadBalancer Service" "Kubernetes Service with Layer 3 Load Balancer" {
+        technology "Kubernetes"
+        this -> replicaset.main "balance Layer 3 traffic"
+}
+}
\ No newline at end of file
diff --git a/dsl/application.dsl b/dsl/application.dsl
new file mode 100644
index 0000000..bcb4bd9
--- /dev/null
+++ b/dsl/application.dsl
@@ -0,0 +1,16 @@
+application = softwareSystem "Application" {
+    description "Initialize Document Areas and (Re-) Import Generic Base Apps when updates occur"
+    tags "nplus"
+    job = Container "Job" "PostSync Job" {
+        technology "Kubernetes"
+        tags "Kubernetes - job"
+
+        main = component "NAPPL Container" "Container Template with official Image Running AppInstaller" {
+            technology "Java"
+            tags "nscale"
+            -> nappljobs.svc "consume" "Advanced Connect Protocol Adapter"
+            -> nplus.confpvc "mount pool"
+        }
+        !include "waitFor.dsl"
+    }
+}
\ No newline at end of file
diff --git a/dsl/clusterService.dsl b/dsl/clusterService.dsl
new file mode 100644
index 0000000..48fb732
--- /dev/null
+++ b/dsl/clusterService.dsl
@@ -0,0 +1,13 @@
+clusterService = element "nscale Cluster Service" {
+    tags "Kubernetes - svc"
+    description "selects all cluster members, nappl and pipeliner"
+    -> nappl "discover"
+    -> nappljobs "discover"
+    -> pipelinercm "discover"
+}
+nappl.replicaset.main -> nappljobs.replicaset.main "cluster communication"
+nappl.replicaset.main -> pipelinercm.replicaset.pl "cluster communication"
+nappljobs.replicaset.main -> nappl.replicaset.main "cluster communication"
+nappljobs.replicaset.main -> pipelinercm.replicaset.pl "cluster communication"
+pipelinercm.replicaset.pl -> nappl.replicaset.main "cluster communication"
+pipelinercm.replicaset.pl -> nappljobs.replicaset.main "cluster communication"
diff --git a/dsl/cmis.dsl b/dsl/cmis.dsl
new file mode 100644
index 0000000..cad9b00
--- /dev/null
+++ b/dsl/cmis.dsl
@@ -0,0 +1,18 @@
+cmis = softwareSystem "nscale CMIS Connector" {
+    tags "nscale"
+    replicaset = Container "ReplicaSet" "StatefulSet with default Replica 2" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        main = component "CMIS Container" "Container Template with official Image" {
+            technology "Java"
+            tags "nscale"
+            -> nplus.confpvc "mount conf"
+            -> nappl.svc "consume" "Advanced Connect Protocol Adapter"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+    !include "ingress.dsl"
+}
\ No newline at end of file
diff --git a/dsl/copyConf.dsl b/dsl/copyConf.dsl
new file mode 100644
index 0000000..82c16ec
--- /dev/null
+++ b/dsl/copyConf.dsl
@@ -0,0 +1,6 @@
+copyConf = component "init:copyConfig" "Init-Container that extracts the initial configuration from the main component and copies it to the central config git share" {
+    technology "bash"
+    tags "nplus"
+    -> nplus.confpvc "mount etc"
+    main -> this "copy initial config"
+}
diff --git a/dsl/dataPvc.dsl b/dsl/dataPvc.dsl
new file mode 100644
index 0000000..66b2d75
--- /dev/null
+++ b/dsl/dataPvc.dsl
@@ -0,0 +1,4 @@
+datapvc = Container "Data Volume" "Persistent Volume Claim for a fast RWO Data Volume" { 
+    technology "PVC"
+    tags "Kubernetes - pvc"
+}
diff --git a/dsl/database.dsl b/dsl/database.dsl
new file mode 100644
index 0000000..a9210cd
--- /dev/null
+++ b/dsl/database.dsl
@@ -0,0 +1,11 @@
+database = softwareSystem "Database" {
+    tags "Database"
+    replicaset = Container "ReplicaSet" "StatefulSet with Replica 1" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        main = component "Postgres Container" "Container Template with official Image" {
+        }
+    }
+    !include "service.dsl"
+}
\ No newline at end of file
diff --git a/dsl/environment.dsl b/dsl/environment.dsl
new file mode 100644
index 0000000..9594ff8
--- /dev/null
+++ b/dsl/environment.dsl
@@ -0,0 +1,27 @@
+nplus = softwareSystem "nplus Environment" {
+    tags "nplus"
+    description "provides global configuration git and web ui"
+    toolbox = Container "nplus Toolbox"{
+        tags "Kubernetes - sts, nplus"
+        description "provides Tools for Admin Tasks"
+    }
+    davserver = Container "nplus DAV Server"{
+        tags "Kubernetes - sts, nplus"
+        description "provides Config DAV Access for Admins to upload snippets etc."
+    }
+    operator = Container "nplus Operator"{
+        tags "Kubernetes - sts, nplus"
+        description "controlls the nplus Custom Resources and provides status information for instances and components"
+    }
+    confpvc = Container "conf" { 
+        tags "Kubernetes - pvc"
+        description "common store for file based configuration data, versioned in git"
+        toolbox -> this "attach"
+        davserver -> this "attach"
+    }
+    Container "nstore Downloader" {
+        description "cron Job downloading Apps from nstore"
+        tags "Kubernetes - cronjob, nplus"
+        -> confpvc "pool"
+    }
+}
diff --git a/dsl/export/c_nplus-key.svg b/dsl/export/c_nplus-key.svg
new file mode 100644
index 0000000..a76e3ff
--- /dev/null
+++ b/dsl/export/c_nplus-key.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 2500 1000" style="background: #ffffff"><g transform="translate(25,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#424c63" stroke-width="2" stroke="#3d6fdd"/><text x="225" y="77.5" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Kubernetes - cronjob,</tspan><tspan x="225" dy="40px">nplus</tspan></text><image xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/cronjob-256.png" x="195" y="172.5" width="60" height="60" opacity="1"/></g><g transform="translate(525,100)"><path id="keyKubernetes-pvcCylinderPath" d="M 0,22.5 a 225,22.5 0,0,0 450 0 a 225,22.5 0,0,0 -450 0 l 0,255 a 225,22.5 0,0,0 450 0 l 0,-255" fill="#dddddd" stroke-width="2" stroke="#3d6fdd"></path><text x="225" y="107.5" text-anchor="middle" fill="#3d6fdd" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Kubernetes - pvc</tspan></text><image xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/pvc-256.png" x="195" y="165" width="60" height="60" opacity="1"/></g><g transform="translate(1025,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#424c63" stroke-width="2" stroke="#3d6fdd"/><text x="225" y="96.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Kubernetes - sts, nplus</tspan></text><image xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/sts-256.png" x="195" y="153.75" width="60" height="60" opacity="1"/></g><g transform="translate(1525,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#424c63" stroke-width="2" stroke="#3b4459"/><text x="225" y="131.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">nplus</tspan></text></g><g transform="translate(2025,25)"><rect x="0" y="180" width="450" height="270" rx="90" fill="#dddddd" stroke-width="2" stroke="#c7c7c7"/><circle cx="225" cy="100" r="100" fill="#dddddd" stroke-width="2" stroke="#c7c7c7"/><line x1="90" y1="300" x2="90" y2="450" stroke-width="2" stroke="#c7c7c7"/><line x1="360" y1="300" x2="360" y2="450" stroke-width="2" stroke="#c7c7c7"/><text x="225" y="256.25" text-anchor="middle" fill="#000000" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Person</tspan></text></g><g transform="translate(25,600)"><rect width="450" height="300" rx="10" ry="10" x="0" y="0" fill="#0f9536" stroke-width="5" stroke="#0f9536"/><rect width="430" height="250" rx="10" ry="10" x="10" y="40" fill="#11a63c" stroke-width="0"/><ellipse cx="20" cy="20" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><ellipse cx="50" cy="20" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><ellipse cx="80" cy="20" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><text x="225" y="141.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">richclient, nscale</tspan></text></g><g transform="translate(525,670)"><path d="M390,0 L390,60 L450,30 L 390,0" style="fill:#707070" stroke-dasharray="" /><path d="M0,30 L390,30" style="stroke:#707070; stroke-width: 6; fill: none; stroke-dasharray: 30 30;" /><text x="225" y="76.25" text-anchor="middle" fill="#707070" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Relationship</tspan></text></g></svg>
\ No newline at end of file
diff --git a/dsl/export/c_nplus.svg b/dsl/export/c_nplus.svg
new file mode 100644
index 0000000..96b92b5
--- /dev/null
+++ b/dsl/export/c_nplus.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 3850 2691" style="background: #ffffff"><defs joint-selector="defs"></defs><g joint-selector="layers"  transform="matrix(1,0,0,1,0,0)"><g ></g><g ><g   id="j_194"  transform="translate(20,2646)"><g id="v-2887"><text  id="v-2888" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >Tuesday, December 19, 2023 at 8:42 AM Central European Standard Time</tspan></text></g></g><g   id="j_193"  transform="translate(20,2615)"><g id="v-2885"><text  id="v-2886" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >the Environment handles multiple Inances running in a Kubernetes Namespace</tspan></text></g></g><g   id="j_192"  transform="translate(20,2571)"><g id="v-2883"><text  id="v-2884" font-size="36px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#000000" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >nplus Environment</tspan></text></g></g><g   id="j_174"  transform="translate(200,1500)" style=""><g  id="v-2635" style="opacity: 1;"><rect  id="v-2636" rx="1" ry="1" stroke="#3b4459" stroke-width="2" pointer-events="visiblePainted" fill="#424c63" width="450" height="300" style="fill: rgb(66, 76, 99); stroke: rgb(59, 68, 89);"></rect><text  id="v-2637" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,68.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Application</tspan></text><text  id="v-2638" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,110.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2639" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,141.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Initialize Document Areas and (Re-)</tspan><tspan dy="1.2em" x="0" >Import Generic Base Apps when</tspan><tspan dy="1.2em" x="0" >updates occur</tspan></text><g  id="v-2640" color="#ffffff" transform="matrix(1,0,0,1,222.5,241.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2641"></image></g></g><g   id="j_175"  transform="translate(3200,1500)" style=""><g  id="v-2648" style="opacity: 1;"><rect  id="v-2649" rx="1" ry="1" stroke="#3b4459" stroke-width="2" pointer-events="visiblePainted" fill="#424c63" width="450" height="300" style="fill: rgb(66, 76, 99); stroke: rgb(59, 68, 89);"></rect><text  id="v-2650" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,46.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nplus Administrator</tspan><tspan dy="1.2em" x="0" >Server</tspan></text><text  id="v-2651" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,131.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2652" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,163.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Layer 4 Proxy with RMS to simulate</tspan><tspan dy="1.2em" x="0" >a classic environment to allow</tspan><tspan dy="1.2em" x="0" >offline configuration</tspan></text><g  id="v-2653" color="#ffffff" transform="matrix(1,0,0,1,222.5,263.1)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2654"></image></g></g><g   id="j_180"  transform="translate(3163,900)" style=""><g  id="v-2700" style="opacity: 1;"><rect  id="v-2701" rx="10" ry="10" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#0f9536" width="450" height="300" style="fill: rgb(15, 149, 54); stroke: rgb(15, 149, 54);"></rect><rect  id="v-2702" rx="10" ry="10" stroke="#0f9536" stroke-width="0" pointer-events="visiblePainted" fill="#11a63c" width="430" height="250" x="10" y="40" style="fill: rgb(17, 166, 60);"></rect><ellipse  id="v-2708" fill="#11a63c" cx="20" cy="20" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><ellipse  id="v-2709" fill="#11a63c" cx="50" cy="20" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><ellipse  id="v-2710" fill="#11a63c" cx="80" cy="20" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><text  id="v-2703" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,113.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Administrator</tspan></text><text  id="v-2704" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2705" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,186.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Eclipse RCP Administrator Client</tspan></text><g  id="v-2706" font-weight="normal" text-anchor="middle" color="#ffffff" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2707"></image></g></g><g   id="j_177"  transform="translate(930,1480)" style=""><g id="v-2665"><rect  id="v-2666" width="1990" height="1011" rx="0" ry="0" fill="#ffffff" stroke="#3b4459" stroke-width="1" stroke-dasharray="20,20" pointer-events="none"></rect><text  id="v-2667" font-size="24px" xml:space="preserve" y="972" font-weight="normal" fill="#3b4459" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >nplus Environment</tspan></text><text  id="v-2668" font-size="17px" xml:space="preserve" y="996" font-weight="normal" fill="#3b4459" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >[Software System]</tspan></text><image  id="v-2669" pointer-events="visible"></image></g></g><g   id="j_176"  transform="translate(1700,1500)" style=""><g  id="v-2658" style="opacity: 1;"><rect  id="v-2659" rx="1" ry="1" stroke="#3d6fdd" stroke-width="2" pointer-events="visiblePainted" fill="#424c63" width="450" height="300" style="fill: rgb(66, 76, 99); stroke: rgb(61, 111, 221);"></rect><text  id="v-2660" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,60.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nplus Toolbox</tspan></text><text  id="v-2661" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,103.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Container]</tspan></text><text  id="v-2662" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,134.4)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >provides Tools for Admin Tasks</tspan></text><g  id="v-2663" color="#ffffff" transform="matrix(1,0,0,1,222.5,249.4)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2664" xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/sts-256.png" width="60" height="60" opacity="1" transform="matrix(1,0,0,1,195,174.4)"></image></g></g><g   id="j_178"  transform="translate(2450,1500)" style=""><g  id="v-2676" style="opacity: 1;"><rect  id="v-2677" rx="1" ry="1" stroke="#3d6fdd" stroke-width="2" pointer-events="visiblePainted" fill="#424c63" width="450" height="300" style="fill: rgb(66, 76, 99); stroke: rgb(61, 111, 221);"></rect><text  id="v-2678" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,45.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nplus DAV Server</tspan></text><text  id="v-2679" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,88.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Container]</tspan></text><text  id="v-2680" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,119.4)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >provides Config DAV Access for</tspan><tspan dy="1.2em" x="0" >Admins to upload snippets etc.</tspan></text><g  id="v-2681" color="#ffffff" transform="matrix(1,0,0,1,222.5,264.4)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2682" xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/sts-256.png" width="60" height="60" opacity="1" transform="matrix(1,0,0,1,195,189.4)"></image></g></g><g   id="j_179"  transform="translate(1700,2100)" style=""><g  id="v-2686" style="opacity: 1;"><path  d="M 0,30 a 225,30 0,0,0 450 0 a 225,30 0,0,0 -450 0 l 0,240 a 225,30 0,0,0 450 0 l 0,-240" id="v-2687" stroke="#3d6fdd" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" style="fill: rgb(221, 221, 221); stroke: rgb(61, 111, 221);"></path><rect  id="v-2688" stroke-width="0" pointer-events="visiblePainted" fill="none" stroke="none" width="450" height="270" x="0" y="30"></rect><text  id="v-2689" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,75.6)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >conf</tspan></text><text  id="v-2690" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,118.1)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >[Container]</tspan></text><text  id="v-2691" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,149.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >common store for file based</tspan><tspan dy="1.2em" x="0" >configuration data, versioned in git</tspan></text><g  id="v-2692" font-weight="normal" text-anchor="middle" color="#3d6fdd" transform="matrix(1,0,0,1,222.5,294.4)" display="none" style="fill: rgb(61, 111, 221);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2693" xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/pvc-256.png" width="60" height="60" opacity="1" transform="matrix(1,0,0,1,195,219.4)"></image></g></g><g   id="j_181"  transform="translate(950,1500)" style=""><g  id="v-2717" style="opacity: 1;"><rect  id="v-2718" rx="1" ry="1" stroke="#3d6fdd" stroke-width="2" pointer-events="visiblePainted" fill="#424c63" width="450" height="300" style="fill: rgb(66, 76, 99); stroke: rgb(61, 111, 221);"></rect><text  id="v-2719" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,45.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nstore Downloader</tspan></text><text  id="v-2720" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,88.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Container]</tspan></text><text  id="v-2721" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,119.4)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >cron Job downloading Apps from</tspan><tspan dy="1.2em" x="0" >nstore</tspan></text><g  id="v-2722" color="#ffffff" transform="matrix(1,0,0,1,222.5,264.4)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2723" xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/cronjob-256.png" width="60" height="60" opacity="1" transform="matrix(1,0,0,1,195,189.4)"></image></g></g><g   id="j_182"  transform="translate(2475,200)" style=""><g  id="v-2727" style="opacity: 1;"><rect  x="0" y="160" width="400" height="240" rx="70" id="v-2729" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></rect><circle  cx="200" cy="88.88888888888889" r="88.88888888888889" id="v-2728" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></circle><line  x1="80" y1="266.6666666666667" x2="80" y2="400" id="v-2735" stroke="#c7c7c7" stroke-width="2" style="stroke: rgb(199, 199, 199);"></line><line  x1="320" y1="266.6666666666667" x2="320" y2="400" id="v-2736" stroke="#c7c7c7" stroke-width="2" style="stroke: rgb(199, 199, 199);"></line><text  id="v-2730" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,200,213.1)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >Admin</tspan></text><text  id="v-2731" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,200,255.6)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >[Person]</tspan></text><text  id="v-2732" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,200,286.9)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >Maintains and Operates the</tspan><tspan dy="1.2em" x="0" >Environment</tspan></text><g  id="v-2733" font-weight="normal" text-anchor="middle" color="#000000" transform="matrix(1,0,0,1,197.5,356.9)" display="none" style="fill: rgb(0, 0, 0);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2734"></image></g></g><g   id="j_183" ><path  stroke="#707070" d="M 2555 600 L 2015 1500" id="v-2746" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.5144956987735764,0.8574929597049117,-0.8574929597049117,-0.5144956987735764,2555,600)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2748" transform="matrix(0.5144955845914773,-0.8574930282141506,0.8574930282141506,0.5144955845914773,2006.4250113328812,1494.8550232643518)" style="opacity: 1;"></path><path  d="M 2555 600 L 2015 1500" id="v-2747" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2740"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2285,1050)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2743" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="39.597816467285156" height="28.996112823486328" transform="matrix(1,0,0,1,-19.8,-14.5)"></rect><text joint-selector="text" id="v-2742" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-10.5)"><tspan dy="0" >use</tspan></text></g><g id="v-2741"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2275,1077)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2745" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2744" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2750" display="none"><g  id="v-2738"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2739"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2749" display="none"><g  id="v-2737" transform="translate(2534.420169782899, 634.2997170285017) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_184" ><path  stroke="#707070" d="M 650 1748 L 762 1796 C 768 1798.6666666666665 774 1801.3333333333333 780 1804 L 1700 2162" id="v-2761" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9174818377271479,0.39777767338152054,-0.39777767338152054,0.9174818377271479,650,1747.5400390625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2763" transform="matrix(-0.9316715687235868,-0.3633016488155962,0.3633016488155962,-0.9316715687235868,1696.3669267381424,2171.576685300392)" style="opacity: 1;"></path><path  d="M 650 1748 L 762 1796 C 768 1798.6666666666665 774 1801.3333333333333 780 1804 L 1700 2162" id="v-2762" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2755"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1174.042724609375,1957.333984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2758" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="130.30128479003906" height="28.996112823486328" transform="matrix(1,0,0,1,-65.2,-14.5)"></rect><text joint-selector="text" id="v-2757" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-10.5)"><tspan dy="0" >mount pool</tspan></text></g><g id="v-2756"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1164.042724609375,1984.333984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2760" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2759" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(771, 1800)" id="v-2889"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2765" display="none"><g  id="v-2753"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2754"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2764" display="none"><g  id="v-2751" transform="translate(686.7658012007223, 1763.7567719431668) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_185" ><path  stroke="#707070" d="M 1925 1800 L 1925 2100" id="v-2775" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(6.123233995736766e-17,1,-1,6.123233995736766e-17,1925,1800)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2777" transform="matrix(-1.8369701987210297e-16,-1,1,-1.8369701987210297e-16,1915,2100)" style="opacity: 1;"></path><path  d="M 1925 1800 L 1925 2100" id="v-2776" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2769"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1925,1950)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2772" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="69.86251068115234" height="28.996112823486328" transform="matrix(1,0,0,1,-34.9,-14.5)"></rect><text joint-selector="text" id="v-2771" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-10.5)"><tspan dy="0" >attach</tspan></text></g><g id="v-2770"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1915,1977)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2774" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2773" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2779" display="none"><g  id="v-2767"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2768"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2778" display="none"><g  id="v-2766" transform="translate(1925.0000000000002, 1840) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_186" ><path  stroke="#707070" d="M 2488 1800 L 2113 2100" id="v-2789" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.7808688416748546,0.6246950072646418,-0.6246950072646418,-0.7808688416748546,2487.5,1800)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2791" transform="matrix(0.7808686753084834,-0.624695215222571,0.624695215222571,0.7808686753084834,2106.2529548446896,2092.191195086641)" style="opacity: 1;"></path><path  d="M 2488 1800 L 2113 2100" id="v-2790" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2783"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2300.5,1950)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2786" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="69.86251068115234" height="28.996112823486328" transform="matrix(1,0,0,1,-34.9,-14.5)"></rect><text joint-selector="text" id="v-2785" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-10.5)"><tspan dy="0" >attach</tspan></text></g><g id="v-2784"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2290.5,1977)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2788" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2787" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2793" display="none"><g  id="v-2781"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2782"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2792" display="none"><g  id="v-2780" transform="translate(2456.765247622279, 1824.9878019021771) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_187" ><path  stroke="#707070" d="M 3200 1748 L 3088 1796 C 3082 1798.6666666666665 3076 1801.3333333333333 3070 1804 L 2150 2162" id="v-2807" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9174818906944409,0.3977775512114203,-0.3977775512114203,-0.9174818906944409,3200,1747.5400390625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2809" transform="matrix(0.9316715687235867,-0.3633016488155965,0.3633016488155965,0.9316715687235867,2146.366918215233,2152.94325392592)" style="opacity: 1;"></path><path  d="M 3200 1748 L 3088 1796 C 3082 1798.6666666666665 3076 1801.3333333333333 3070 1804 L 2150 2162" id="v-2808" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2801"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2675.957275390625,1957.333984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2804" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="150.1830291748047" height="57.79611396789551" transform="matrix(1,0,0,1,-74.6,-28.9)"></rect><text joint-selector="text" id="v-2803" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-24.9)"><tspan dy="0" >mount global</tspan><tspan dy="1.2em" x="0" >Instance conf</tspan></text></g><g id="v-2802"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2665.957275390625,1999.333984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2806" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2805" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(3079, 1800)" id="v-2890"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2811" display="none"><g  id="v-2799"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2800"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2810" display="none"><g  id="v-2797" transform="translate(3163.2341987992777, 1763.7567719431668) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_188" ><path  stroke="#707070" d="M 1363 1800 L 1738 2100" id="v-2821" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.7808688000832672,0.624695059254128,-0.624695059254128,0.7808688000832672,1362.5,1800)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2823" transform="matrix(-0.7808688416748548,-0.6246950072646416,0.6246950072646416,-0.7808688416748548,1731.2530225237897,2107.808568176895)" style="opacity: 1;"></path><path  d="M 1363 1800 L 1738 2100" id="v-2822" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2815"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1550.5,1950)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2818" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="49.56523132324219" height="28.996112823486328" transform="matrix(1,0,0,1,-24.8,-14.5)"></rect><text joint-selector="text" id="v-2817" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-10.5)"><tspan dy="0" >pool</tspan></text></g><g id="v-2816"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1540.5,1977)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2820" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2819" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2825" display="none"><g  id="v-2813"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2814"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2824" display="none"><g  id="v-2812" transform="translate(1394.2347523777212, 1824.9878019021771) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_189" ><path  stroke="#707070" d="M 2675 600 L 2675 1500" id="v-2835" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(6.123233995736766e-17,1,-1,6.123233995736766e-17,2675,600)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2837" transform="matrix(-1.8369701987210297e-16,-1,1,-1.8369701987210297e-16,2665,1500)" style="opacity: 1;"></path><path  d="M 2675 600 L 2675 1500" id="v-2836" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2829"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2675,1050)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2832" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="74.57437896728516" height="28.996112823486328" transform="matrix(1,0,0,1,-37.3,-14.5)"></rect><text joint-selector="text" id="v-2831" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-10.5)"><tspan dy="0" >mount</tspan></text></g><g id="v-2830"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2665,1077)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2834" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2833" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2839" display="none"><g  id="v-2827"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2828"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2838" display="none"><g  id="v-2826" transform="translate(2675, 640) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_190" ><path  stroke="#707070" d="M 2875 582 L 3223 900" id="v-2849" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.7390018038626611,0.6737034465458321,-0.6737034465458321,0.7390018038626611,2875,582.3300170898438)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2851" transform="matrix(-0.7390018038626612,-0.673703446545832,0.673703446545832,-0.7390018038626612,3216.7230519325435,907.38999195721)" style="opacity: 1;"></path><path  d="M 2875 582 L 3223 900" id="v-2850" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2843"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3049,741)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2846" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="39.597816467285156" height="28.996112823486328" transform="matrix(1,0,0,1,-19.8,-14.5)"></rect><text joint-selector="text" id="v-2845" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-10.5)"><tspan dy="0" >use</tspan></text></g><g id="v-2844"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3039,768)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2848" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2847" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2853" display="none"><g  id="v-2841"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2842"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2852" display="none"><g  id="v-2840" transform="translate(2904.5283953157063, 608.9828439953867) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_191" ><path  stroke="#707070" d="M 3397 1200 L 3416 1500" id="v-2869" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.06154973425033066,0.9981040177324775,-0.9981040177324775,0.06154973425033066,3397.25,1200)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2871" transform="matrix(-0.06154986715591951,-0.9981040095366257,0.9981040095366257,-0.06154986715591951,3405.768980060568,1500.615459665363)" style="opacity: 1;"></path><path  d="M 3397 1200 L 3416 1500" id="v-2870" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2860"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3406.5,1350)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2864" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="148.15200805664062" height="57.79611396789551" transform="matrix(1,0,0,1,-74.1,-28.9)"></rect><text joint-selector="text" id="v-2863" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-24.9)"><tspan dy="0" >Remote</tspan><tspan dy="1.2em" x="0" >Management</tspan></text></g><g id="v-2861"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3406.5,1392)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2866" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="205.14749145507812" height="23.196889877319336" transform="matrix(1,0,0,1,-102.6,-11.6)"></rect><text joint-selector="text" id="v-2865" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-7.8)"><tspan dy="0" >[RMS and https Protocols]</tspan></text></g><g id="v-2862"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,3396.5,1401.25)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2868" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2867" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2873" display="none"><g  id="v-2858"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2859"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2872" display="none"><g  id="v-2857" transform="translate(3399.528267826243, 1239.9200183090986) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g></g><g ></g><g ></g><g ></g></g></svg>
\ No newline at end of file
diff --git a/dsl/export/export-diagrams.js b/dsl/export/export-diagrams.js
new file mode 100644
index 0000000..3c2849d
--- /dev/null
+++ b/dsl/export/export-diagrams.js
@@ -0,0 +1,152 @@
+const puppeteer = require('puppeteer');
+const fs = require('fs');
+
+const FILENAME_SUFFIX = '';
+
+const PNG_FORMAT = 'png';
+const SVG_FORMAT = 'svg';
+
+const IGNORE_HTTPS_ERRORS = true;
+const HEADLESS = true;
+
+const IMAGE_VIEW_TYPE = 'Image';
+
+if (process.argv.length < 4) {
+  console.log("Usage: <structurizrUrl> <png|svg> [username] [password]")
+  process.exit(1);
+}
+
+const url = process.argv[2];
+const format = process.argv[3];
+
+if (format !== PNG_FORMAT && format !== SVG_FORMAT) {
+  console.log("The output format must be ' + PNG_FORMAT + ' or ' + SVG_FORMAT + '.");
+  process.exit(1);
+}
+
+var username;
+var password;
+
+if (process.argv.length > 3) {
+  username = process.argv[4];
+  password = process.argv[5];
+}
+
+var expectedNumberOfExports = 0;
+var actualNumberOfExports = 0;
+
+(async () => {
+  const browser = await puppeteer.launch({ignoreHTTPSErrors: IGNORE_HTTPS_ERRORS, headless: HEADLESS});
+  const page = await browser.newPage();
+
+  if (username !== undefined && password !== undefined) {
+    // sign in
+    const parts = url.split('://');
+    const signinUrl = parts[0] + '://' + parts[1].substring(0, parts[1].indexOf('/')) + '/dashboard'; 
+    console.log(' - Signing in via ' + signinUrl);
+
+    await page.goto(signinUrl, { waitUntil: 'networkidle2' });
+    await page.type('#username', username);
+    await page.type('#password', password);
+    await page.keyboard.press('Enter');
+    await page.waitForSelector('div#dashboard');
+  }
+
+  // visit the diagrams page
+  console.log(" - Opening " + url);
+  await page.goto(url, { waitUntil: 'domcontentloaded' });
+  await page.waitForFunction('structurizr.scripting && structurizr.scripting.isDiagramRendered() === true');
+
+  if (format === PNG_FORMAT) {
+    // add a function to the page to save the generated PNG images
+    await page.exposeFunction('savePNG', (content, filename) => {
+      console.log(" - " + filename);
+      content = content.replace(/^data:image\/png;base64,/, "");
+      fs.writeFile(filename, content, 'base64', function (err) {
+        if (err) throw err;
+      });
+      
+      actualNumberOfExports++;
+
+      if (actualNumberOfExports === expectedNumberOfExports) {
+        console.log(" - Finished");
+        browser.close();
+      }
+    });
+  }
+
+  // get the array of views
+  const views = await page.evaluate(() => {
+    return structurizr.scripting.getViews();
+  });
+
+  views.forEach(function(view) {
+    if (view.type === IMAGE_VIEW_TYPE) {
+      expectedNumberOfExports++; // diagram only
+    } else {
+      expectedNumberOfExports++; // diagram
+      expectedNumberOfExports++; // key
+    }
+  });
+
+  console.log(" - Starting export");
+  for (var i = 0; i < views.length; i++) {
+    const view = views[i];
+
+    await page.evaluate((view) => {
+      structurizr.scripting.changeView(view.key);
+    }, view);
+
+    await page.waitForFunction('structurizr.scripting.isDiagramRendered() === true');
+
+    if (format === SVG_FORMAT) {
+      const diagramFilename = FILENAME_SUFFIX + view.key + '.svg';
+      const diagramKeyFilename = FILENAME_SUFFIX + view.key + '-key.svg'
+
+      var svgForDiagram = await page.evaluate(() => {
+        return structurizr.scripting.exportCurrentDiagramToSVG({ includeMetadata: true });
+      });
+    
+      console.log(" - " + diagramFilename);
+      fs.writeFile(diagramFilename, svgForDiagram, function (err) {
+        if (err) throw err;
+      });
+      actualNumberOfExports++;
+    
+      if (view.type !== IMAGE_VIEW_TYPE) {
+        var svgForKey = await page.evaluate(() => {
+          return structurizr.scripting.exportCurrentDiagramKeyToSVG();
+        });
+      
+        console.log(" - " + diagramKeyFilename);
+        fs.writeFile(diagramKeyFilename, svgForKey, function (err) {
+          if (err) throw err;
+        });
+        actualNumberOfExports++;
+      }
+
+      if (actualNumberOfExports === expectedNumberOfExports) {
+        console.log(" - Finished");
+        browser.close();
+      }    
+    } else {
+      const diagramFilename = FILENAME_SUFFIX + view.key + '.png';
+      const diagramKeyFilename = FILENAME_SUFFIX + view.key + '-key.png'
+
+      page.evaluate((diagramFilename) => {
+        structurizr.scripting.exportCurrentDiagramToPNG({ includeMetadata: true, crop: false }, function(png) {
+          window.savePNG(png, diagramFilename);
+        })
+      }, diagramFilename);
+
+      if (view.type !== IMAGE_VIEW_TYPE) {
+        page.evaluate((diagramKeyFilename) => {
+          structurizr.scripting.exportCurrentDiagramKeyToPNG(function(png) {
+            window.savePNG(png, diagramKeyFilename);
+          })
+        }, diagramKeyFilename);
+      }
+    }
+  }
+
+})();
\ No newline at end of file
diff --git a/dsl/export/export-documentation.js b/dsl/export/export-documentation.js
new file mode 100644
index 0000000..b06db44
--- /dev/null
+++ b/dsl/export/export-documentation.js
@@ -0,0 +1,63 @@
+const puppeteer = require('puppeteer');
+const fs = require('fs');
+
+const FILENAME_SUFFIX = '';
+
+const IGNORE_HTTPS_ERRORS = true;
+const HEADLESS = true;
+
+if (process.argv.length < 3) {
+  console.log("Usage: <structurizrUrl> [username] [password]")
+  process.exit(1);
+}
+
+const url = process.argv[2];
+
+var username;
+var password;
+
+if (process.argv.length > 2) {
+  username = process.argv[3];
+  password = process.argv[4];
+}
+
+(async () => {
+  const browser = await puppeteer.launch({ignoreHTTPSErrors: IGNORE_HTTPS_ERRORS, headless: HEADLESS});
+  const page = await browser.newPage();
+
+  if (username !== undefined && password !== undefined) {
+    // sign in
+    const parts = url.split('://');
+    const signinUrl = parts[0] + '://' + parts[1].substring(0, parts[1].indexOf('/')) + '/dashboard'; 
+    console.log(' - Signing in via ' + signinUrl);
+
+    await page.goto(signinUrl, { waitUntil: 'networkidle2' });
+    await page.type('#username', username);
+    await page.type('#password', password);
+    await page.keyboard.press('Enter');
+    await page.waitForSelector('div#dashboard');
+  }
+
+  // visit the documentation page
+  console.log(" - Opening " + url);
+  await page.goto(url, { waitUntil: 'domcontentloaded' });
+  await page.waitForFunction('structurizr.scripting && structurizr.scripting.isDocumentationRendered() === true');
+
+  await page.exposeFunction('saveHtml', (content) => {
+    const filename = FILENAME_SUFFIX + 'documentation.html';
+    console.log(" - Writing " + filename);
+    fs.writeFile(filename, content, 'utf8', function (err) {
+      if (err) throw err;
+    });
+
+    console.log(" - Finished");
+    browser.close();
+  });
+
+  await page.evaluate(() => {
+    return structurizr.scripting.exportDocumentationToOfflineHtmlPage(function(html) {
+      saveHtml(html);
+    });
+  });
+
+})();
\ No newline at end of file
diff --git a/dsl/export/sc_nappl-key.svg b/dsl/export/sc_nappl-key.svg
new file mode 100644
index 0000000..e20aafe
--- /dev/null
+++ b/dsl/export/sc_nappl-key.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 2500 1000" style="background: #ffffff"><g transform="translate(25,100)"><path id="keyDatabaseCylinderPath" d="M 0,22.5 a 225,22.5 0,0,0 450 0 a 225,22.5 0,0,0 -450 0 l 0,255 a 225,22.5 0,0,0 450 0 l 0,-255" fill="#707070" stroke-width="2" stroke="#656565"></path><text x="225" y="142.5" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Database</tspan></text></g><g transform="translate(525,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#dddddd" stroke-width="2" stroke="#c7c7c7"/><text x="225" y="131.25" text-anchor="middle" fill="#000000" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Element</tspan></text></g><g transform="translate(1025,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#dddddd" stroke-width="2" stroke="#3d6fdd"/><text x="225" y="96.25" text-anchor="middle" fill="#3d6fdd" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Kubernetes - crd</tspan></text><image xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/crd-256.png" x="195" y="153.75" width="60" height="60" opacity="1"/></g><g transform="translate(1525,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#dddddd" stroke-width="2" stroke="#3d6fdd"/><text x="225" y="96.25" text-anchor="middle" fill="#3d6fdd" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Kubernetes - ds</tspan></text><image xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/ds-256.png" x="195" y="153.75" width="60" height="60" opacity="1"/></g><g transform="translate(2025,55.5)"><polygon points="112.5,0 337.5,0 450,194.5 337.5,389 112.5,389 0,194.5" fill="#dddddd" stroke-width="2" stroke="#3d6fdd"/><text x="225" y="140.75" text-anchor="middle" fill="#3d6fdd" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Kubernetes - svc</tspan></text><image xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/svc-256.png" x="195" y="198.25" width="60" height="60" opacity="1"/></g><g transform="translate(25,600)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#424c63" stroke-width="2" stroke="#3b4459"/><text x="225" y="131.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">nplus</tspan></text></g><g transform="translate(525,600)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#11a63c" stroke-width="2" stroke="#0f9536"/><text x="225" y="131.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">nscale</tspan></text></g><g transform="translate(1025,670)"><path d="M390,0 L390,60 L450,30 L 390,0" style="fill:#707070" stroke-dasharray="" /><path d="M0,30 L390,30" style="stroke:#707070; stroke-width: 6; fill: none; stroke-dasharray: 30 30;" /><text x="225" y="76.25" text-anchor="middle" fill="#707070" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Relationship</tspan></text></g></svg>
\ No newline at end of file
diff --git a/dsl/export/sc_nappl.svg b/dsl/export/sc_nappl.svg
new file mode 100644
index 0000000..66d9fb5
--- /dev/null
+++ b/dsl/export/sc_nappl.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 10266 3928" style="background: #ffffff"><defs joint-selector="defs"></defs><g joint-selector="layers"  transform="matrix(1,0,0,1,0,0)"><g ></g><g ><g   id="j_297"  transform="translate(20,3883)"><g id="v-4474"><text  id="v-4475" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >Tuesday, December 19, 2023 at 8:42 AM Central European Standard Time</tspan></text></g></g><g   id="j_296"  transform="translate(20,3852)"><g id="v-4472"><text  id="v-4473" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >focus on nscale Application Layer</tspan></text></g></g><g   id="j_295"  transform="translate(20,3808)"><g id="v-4470"><text  id="v-4471" font-size="36px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#000000" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >[System Context] nscale Application Layer</tspan></text></g></g><g   id="j_196"  transform="translate(200,200)" style=""><g id="v-2899"><rect  id="v-2900" width="9227" height="3528" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-2901" font-size="24px" xml:space="preserve" y="3513" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Kubernetes Cluster</tspan></text><text  id="v-2902" font-size="17px" xml:space="preserve" display="none" y="3513" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-2903" pointer-events="visible"></image></g></g><g   id="j_197"  transform="translate(2179,220)" style=""><g id="v-2904"><rect  id="v-2905" width="5601" height="3434" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-2906" font-size="24px" xml:space="preserve" y="3419" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Namespace</tspan></text><text  id="v-2907" font-size="17px" xml:space="preserve" display="none" y="3419" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-2908" pointer-events="visible"></image></g></g><g   id="j_205"  transform="translate(8957,2080)" style=""><g  id="v-2981" style="opacity: 1;"><rect  id="v-2982" rx="1" ry="1" stroke="#3d6fdd" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(61, 111, 221);"></rect><text  id="v-2983" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,39.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >Kubernetes Ingress</tspan><tspan dy="1.2em" x="0" >Controller</tspan></text><text  id="v-2984" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,124.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2985" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >Layer 7 Load Balancer</tspan></text><g  id="v-2986" color="#3d6fdd" transform="matrix(1,0,0,1,222.5,270.6)" display="none" style="fill: rgb(61, 111, 221);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2987" xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/ds-256.png" width="60" height="60" opacity="1" transform="matrix(1,0,0,1,195,195.6)"></image></g></g><g   id="j_209"  transform="translate(220,880)" style=""><g  id="v-3021" style="opacity: 1;"><rect  id="v-3022" rx="1" ry="1" stroke="#3d6fdd" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(61, 111, 221);"></rect><text  id="v-3023" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,39.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >Cert Manager Cluster</tspan><tspan dy="1.2em" x="0" >Issuer</tspan></text><text  id="v-3024" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,124.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-3025" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >provides certificates</tspan></text><g  id="v-3026" color="#3d6fdd" transform="matrix(1,0,0,1,222.5,270.6)" display="none" style="fill: rgb(61, 111, 221);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-3027" xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/crd-256.png" width="60" height="60" opacity="1" transform="matrix(1,0,0,1,195,195.6)"></image></g></g><g   id="j_198"  transform="translate(2400,240)" style=""><g id="v-2909"><rect  id="v-2910" width="5360" height="2814" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-2911" font-size="24px" xml:space="preserve" y="2799" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Instance</tspan></text><text  id="v-2912" font-size="17px" xml:space="preserve" display="none" y="2799" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-2913" pointer-events="visible"></image></g></g><g   id="j_210"  transform="translate(2199,3280)" style=""><g  id="v-3034" style="opacity: 1;"><rect  id="v-3035" rx="1" ry="1" stroke="#3b4459" stroke-width="2" pointer-events="visiblePainted" fill="#424c63" width="450" height="300" style="fill: rgb(66, 76, 99); stroke: rgb(59, 68, 89);"></rect><text  id="v-3036" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,83.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nplus Environment</tspan></text><text  id="v-3037" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,125.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-3038" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,156.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >provides global configuration git</tspan><tspan dy="1.2em" x="0" >and web ui</tspan></text><g  id="v-3039" color="#ffffff" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-3040"></image></g></g><g   id="j_195"  transform="translate(6345,2680)" style=""><g  id="v-2891" style="opacity: 1;"><path  d="M 0,30 a 225,30 0,0,0 450 0 a 225,30 0,0,0 -450 0 l 0,240 a 225,30 0,0,0 450 0 l 0,-240" id="v-2892" stroke="#656565" stroke-width="2" pointer-events="visiblePainted" fill="#707070" style="fill: rgb(112, 112, 112); stroke: rgb(101, 101, 101);"></path><rect  id="v-2893" stroke-width="0" pointer-events="visiblePainted" fill="none" stroke="none" width="450" height="270" x="0" y="30"></rect><text  id="v-2894" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,143.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Database</tspan></text><text  id="v-2895" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,185.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2896" font-size="24" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,216.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><g  id="v-2897" font-weight="normal" text-anchor="middle" color="#ffffff" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2898"></image></g></g><g   id="j_200"  transform="translate(6325,260)" style=""><g id="v-2927"><rect  id="v-2928" width="1415" height="2194" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-2929" font-size="24px" xml:space="preserve" y="2179" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >nscale Application Layer Cluster</tspan></text><text  id="v-2930" font-size="17px" xml:space="preserve" display="none" y="2179" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-2931" pointer-events="visible"></image></g></g><g   id="j_201"  transform="translate(4049,2680)" style=""><g  id="v-2935" style="opacity: 1;"><rect  id="v-2936" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-2937" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,113.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Rendition Server</tspan></text><text  id="v-2938" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2939" font-size="24" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,186.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><g  id="v-2940" color="#ffffff" transform="matrix(1,0,0,1,222.5,196.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2941"></image></g></g><g   id="j_202"  transform="translate(4845,1480)" style=""><g  id="v-2945" style="opacity: 1;"><rect  id="v-2946" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-2947" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,113.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale ILM Connector</tspan></text><text  id="v-2948" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2949" font-size="24" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,186.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><g  id="v-2950" color="#ffffff" transform="matrix(1,0,0,1,222.5,196.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2951"></image></g></g><g   id="j_203"  transform="translate(4095,1480)" style=""><g  id="v-2958" style="opacity: 1;"><rect  id="v-2959" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-2960" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,76.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Application Layer</tspan><tspan dy="1.2em" x="0" >Web</tspan></text><text  id="v-2961" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,161.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2962" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,193.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >provides html web ui for nscale</tspan></text><g  id="v-2963" color="#ffffff" transform="matrix(1,0,0,1,210,233.1)" display="none" style="fill: rgb(255, 255, 255);"><g  transform="translate(5 0)"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" viewBox="0 0 16 16"><path fill-rule="evenodd" d="M6.5 12a5.5 5.5 0 1 0 0-11 5.5 5.5 0 0 0 0 11zM13 6.5a6.5 6.5 0 1 1-13 0 6.5 6.5 0 0 1 13 0z"></path><path d="M10.344 11.742c.03.04.062.078.098.115l3.85 3.85a1 1 0 0 0 1.415-1.414l-3.85-3.85a1.007 1.007 0 0 0-.115-.1 6.538 6.538 0 0 1-1.398 1.4z"></path><path fill-rule="evenodd" d="M6.5 3a.5.5 0 0 1 .5.5V6h2.5a.5.5 0 0 1 0 1H7v2.5a.5.5 0 0 1-1 0V7H3.5a.5.5 0 0 1 0-1H6V3.5a.5.5 0 0 1 .5-.5z"></path></svg></g><g ></g><g ></g><g ></g></g><image  id="v-2964"></image></g></g><g   id="j_207"  transform="translate(4416,280)" style=""><g  id="v-3001" style="opacity: 1;"><rect  id="v-3002" rx="1" ry="1" stroke="#3b4459" stroke-width="2" pointer-events="visiblePainted" fill="#424c63" width="450" height="300" style="fill: rgb(66, 76, 99); stroke: rgb(59, 68, 89);"></rect><text  id="v-3003" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,46.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nplus Administrator</tspan><tspan dy="1.2em" x="0" >Server</tspan></text><text  id="v-3004" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,131.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-3005" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,163.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Layer 4 Proxy with RMS to simulate</tspan><tspan dy="1.2em" x="0" >a classic environment to allow</tspan><tspan dy="1.2em" x="0" >offline configuration</tspan></text><g  id="v-3006" color="#ffffff" transform="matrix(1,0,0,1,222.5,263.1)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-3007"></image></g></g><g   id="j_208"  transform="translate(2420,1480)" style=""><g  id="v-3011" style="opacity: 1;"><rect  id="v-3012" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-3013" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Pipeliner AC</tspan></text><text  id="v-3014" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-3015" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Pipeliner im AC Modus</tspan></text><g  id="v-3016" color="#ffffff" transform="matrix(1,0,0,1,222.5,211.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-3017"></image></g></g><g   id="j_211"  transform="translate(5595,1480)" style=""><g  id="v-3044" style="opacity: 1;"><rect  id="v-3045" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-3046" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,113.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale CMIS Connector</tspan></text><text  id="v-3047" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-3048" font-size="24" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,186.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><g  id="v-3049" color="#ffffff" transform="matrix(1,0,0,1,222.5,196.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-3050"></image></g></g><g   id="j_214"  transform="translate(4095,880)" style=""><g  id="v-3080" style="opacity: 1;"><rect  id="v-3081" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-3082" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,61.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Monitoring</tspan><tspan dy="1.2em" x="0" >Console</tspan></text><text  id="v-3083" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,146.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-3084" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,178.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >provides monitoring for all nscale</tspan><tspan dy="1.2em" x="0" >components</tspan></text><g  id="v-3085" color="#ffffff" transform="matrix(1,0,0,1,222.5,248.1)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-3086"></image></g></g><g   id="j_216"  transform="translate(5199,2680)" style=""><g  id="v-3103" style="opacity: 1;"><rect  id="v-3104" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-3105" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,113.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Storage Layer</tspan></text><text  id="v-3106" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-3107" font-size="24" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,186.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><g  id="v-3108" color="#ffffff" transform="matrix(1,0,0,1,222.5,196.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-3109"></image></g></g><g   id="j_199"  transform="translate(6345,2080)" style=""><g  id="v-2920" style="opacity: 1;"><rect  id="v-2921" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-2922" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,83.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Application Layer</tspan></text><text  id="v-2923" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,125.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2924" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,156.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Provides DMS and BPM</tspan><tspan dy="1.2em" x="0" >Functionality</tspan></text><g  id="v-2925" color="#ffffff" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2926"></image></g></g><g   id="j_204"  transform="translate(6961,1480)" style=""><g  id="v-2971" style="opacity: 1;"><rect  id="v-2972" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-2973" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Pipeliner CM</tspan></text><text  id="v-2974" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2975" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Pipeliner im Core Modus</tspan></text><g  id="v-2976" color="#ffffff" transform="matrix(1,0,0,1,222.5,211.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2977"></image></g></g><g   id="j_213"  transform="translate(7270,880)" style=""><g  id="v-3067" style="opacity: 1;"><rect  id="v-3068" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-3069" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,91.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Application Layer</tspan><tspan dy="1.2em" x="0" >(Jobs)</tspan></text><text  id="v-3070" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,176.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-3071" font-size="24" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,208.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><g  id="v-3072" color="#ffffff" transform="matrix(1,0,0,1,222.5,218.1)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-3073"></image></g></g><g   id="j_215"  transform="translate(6741,280)" style=""><g  id="v-3093" style="opacity: 1;"><polygon  id="v-3094" stroke="#3d6fdd" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" points="112.5,0 337.5,0 450,194.5 337.5,389 112.5,389 0,194.5" style="fill: rgb(221, 221, 221); stroke: rgb(61, 111, 221);"></polygon><text  id="v-3095" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,100.7)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >nscale Cluster Service</tspan></text><text  id="v-3096" font-size="17" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,143.2)" style="fill: rgb(61, 111, 221);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><text  id="v-3097" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,153.2)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >selects all cluster members,</tspan><tspan dy="1.2em" x="0" >nappl and pipeliner</tspan></text><g  id="v-3098" font-weight="normal" text-anchor="middle" color="#3d6fdd" transform="matrix(1,0,0,1,222.1,298.2)" display="none" style="fill: rgb(61, 111, 221);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-3099" xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/svc-256.png" width="60" height="60" opacity="1" transform="matrix(1,0,0,1,190.3,223.2)"></image></g></g><g   id="j_206"  transform="translate(9616,1480)" style=""><g  id="v-2988" style="opacity: 1;"><rect  id="v-2989" rx="1" ry="1" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></rect><text  id="v-2990" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >SAP</tspan></text><text  id="v-2991" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2992" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >SAP Server</tspan></text><g  id="v-2993" color="#000000" transform="matrix(1,0,0,1,210,211.9)" display="none" style="fill: rgb(0, 0, 0);"><g  transform="translate(5 0)"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" viewBox="0 0 16 16"><path fill-rule="evenodd" d="M6.5 12a5.5 5.5 0 1 0 0-11 5.5 5.5 0 0 0 0 11zM13 6.5a6.5 6.5 0 1 1-13 0 6.5 6.5 0 0 1 13 0z"></path><path d="M10.344 11.742c.03.04.062.078.098.115l3.85 3.85a1 1 0 0 0 1.415-1.414l-3.85-3.85a1.007 1.007 0 0 0-.115-.1 6.538 6.538 0 0 1-1.398 1.4z"></path><path fill-rule="evenodd" d="M6.5 3a.5.5 0 0 1 .5.5V6h2.5a.5.5 0 0 1 0 1H7v2.5a.5.5 0 0 1-1 0V7H3.5a.5.5 0 0 1 0-1H6V3.5a.5.5 0 0 1 .5-.5z"></path></svg></g><g ></g><g ></g><g ></g></g><image  id="v-2994"></image></g></g><g   id="j_212"  transform="translate(9616,280)" style=""><g  id="v-3057" style="opacity: 1;"><rect  id="v-3058" rx="1" ry="1" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></rect><text  id="v-3059" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,83.1)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >Identity Provider</tspan></text><text  id="v-3060" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,125.6)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-3061" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,156.9)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >Provider or Broker for Identity</tspan><tspan dy="1.2em" x="0" >Information and SSO Services</tspan></text><g  id="v-3062" color="#000000" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(0, 0, 0);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-3063"></image></g></g><g   id="j_217" ><path  stroke="#707070" d="M 7144 1780 L 6948 2474 C 6946 2480.6666666666665 6941.666666666666 2484.333333333333 6935 2485 L 5059 2679 C 5052.333333333333 2679.6666666666665 5045.666666666666 2680.6666666666665 5039 2682 L 4499 2786" id="v-3124" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.271594236799311,0.9624118507881123,-0.9624118507881123,-0.271594236799311,7143.669921875,1780)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3126" transform="matrix(0.9817804299927354,-0.19001891296205115,0.19001891296205115,0.9817804299927354,4497.099877664202,2776.6321895171936)" style="opacity: 1;"></path><path  d="M 7144 1780 L 6948 2474 C 6946 2480.6666666666665 6941.666666666666 2484.333333333333 6935 2485 L 5059 2679 C 5052.333333333333 2679.6666666666665 5045.666666666666 2680.6666666666665 5039 2682 L 4499 2786" id="v-3125" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3118"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6081.15771484375,2573.297119140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3121" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="189.40103149414062" height="31.434292793273926" transform="matrix(1,0,0,1,-94.7,-15.7)"></rect><text joint-selector="text" id="v-3120" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >create renditions</tspan></text></g><g id="v-3119"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6071.15771484375,2600.297119140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3123" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3122" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6945, 2484)" id="v-4484"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(5049, 2680)" id="v-4485"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3128" display="none"><g  id="v-3116"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3117"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3127" display="none"><g  id="v-3113" transform="translate(7133.128419719411, 1818.4942689526988) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_218" ><path  stroke="#707070" d="M 4170 1180 L 3877 1473 C 3872.333333333333 1477.6666666666665 3870 1483.3333333333333 3870 1490 L 3870 1770 C 3870 1776.6666666666665 3872.6666666666665 1781.9999999999998 3878 1786 L 5202 2680" id="v-3140" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.7071067811865475,0.7071067811865476,-0.7071067811865476,-0.7071067811865475,4170,1180)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3142" transform="matrix(-0.8285889016866373,-0.5598575104450525,0.5598575104450525,-0.8285889016866373,5196.401181099916,2688.2858313088163)" style="opacity: 1;"></path><path  d="M 4170 1180 L 3877 1473 C 3872.333333333333 1477.6666666666665 3870 1483.3333333333333 3870 1490 L 3870 1770 C 3870 1776.6666666666665 3872.6666666666665 1781.9999999999998 3878 1786 L 5202 2680" id="v-3141" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3134"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,4236.72900390625,2028.2232666015625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3137" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.94720458984375" height="31.434292793273926" transform="matrix(1,0,0,1,-45,-15.7)"></rect><text joint-selector="text" id="v-3136" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >monitor</tspan></text></g><g id="v-3135"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,4226.72900390625,2055.22314453125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3139" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3138" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(3870, 1480)" id="v-4486"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(3870, 1780)" id="v-4487"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3144" display="none"><g  id="v-3132"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3133"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3143" display="none"><g  id="v-3129" transform="translate(4141.715728752538, 1208.284271247462) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_219" ><path  stroke="#707070" d="M 8957 2125 L 8236 1791 C 8230.12093881502 1787.8998990975842 8223.787605481688 1785.8998990975842 8217 1785 L 7411 1664" id="v-3157" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9068827517152243,-0.421383049779441,0.421383049779441,-0.9068827517152243,8957,2125.4599609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3159" transform="matrix(0.9889127656993254,0.14849761559335237,-0.14849761559335237,0.9889127656993254,7412.4850086551905,1653.9009206011362)" style="opacity: 1;"></path><path  d="M 8957 2125 L 8236 1791 C 8230.12093881502 1787.8998990975842 8223.787605481688 1785.8998990975842 8217 1785 L 7411 1664" id="v-3158" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3151"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8216.80078125,1784.9700927734375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3154" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.55667114257812" height="60.23430061340332" transform="matrix(1,0,0,1,-86.8,-30.1)"></rect><text joint-selector="text" id="v-3153" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-3152"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8206.80078125,1826.9700927734375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3156" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3155" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(8227.181408222532, 1786.3498486463764)" id="v-4488"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3161" display="none"><g  id="v-3149"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3150"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3160" display="none"><g  id="v-3148" transform="translate(8920.70523414599, 2108.186613321444) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_220" ><path  stroke="#707070" d="M 4416 507 L 3341 877 C 3334.9999999999995 879 3328.9999999999995 881.6666666666666 3323 885 L 2279 1475 C 2273 1478.3333333333333 2270 1483.3333333333333 2270 1490 L 2270 1770 C 2270 1776.6666666666665 2273.333333333333 1780.6666666666665 2280 1782 L 3522 2078 C 3528.6666666666665 2079.333333333333 3535 2081.6666666666665 3541 2085 L 4240 2479 C 4246 2482.333333333333 4252.333333333333 2485 4259 2487 L 5199 2764" id="v-3179" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9456799022724817,0.32509925013433905,-0.32509925013433905,-0.9456799022724817,4416,507.3500061035156)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3181" transform="matrix(-0.9592757230492903,-0.28247139176961134,0.28247139176961134,-0.9592757230492903,5196.175269875297,2773.3327543513137)" style="opacity: 1;"></path><path  d="M 4416 507 L 3341 877 C 3334.9999999999995 879 3328.9999999999995 881.6666666666666 3323 885 L 2279 1475 C 2273 1478.3333333333333 2270 1483.3333333333333 2270 1490 L 2270 1770 C 2270 1776.6666666666665 2273.333333333333 1780.6666666666665 2280 1782 L 3522 2078 C 3528.6666666666665 2079.333333333333 3535 2081.6666666666665 3541 2085 L 4240 2479 C 4246 2482.333333333333 4252.333333333333 2485 4259 2487 L 5199 2764" id="v-3180" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3173"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2488.486572265625,1831.6876220703125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3176" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.02508544921875" height="60.23430061340332" transform="matrix(1,0,0,1,-82.5,-30.1)"></rect><text joint-selector="text" id="v-3175" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-3174"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2478.486572265625,1873.6876220703125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3178" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3177" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(3332, 880)" id="v-4489"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(2270, 1480)" id="v-4490"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(2270, 1780)" id="v-4491"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(3532, 2080)" id="v-4492"><circle  idx="3" r="10"></circle><path  idx="3" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="3" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(4249, 2484)" id="v-4493"><circle  idx="4" r="10"></circle><path  idx="4" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="4" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3183" display="none"><g  id="v-3171"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3172"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3182" display="none"><g  id="v-3165" transform="translate(4378.177609031894, 520.0179392169298) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_221" ><path  stroke="#707070" d="M 670 1059 L 1614 1179 C 1620.6666666666665 1179.6666666666665 1627.333333333333 1180.3333333333333 1634 1181 L 5435 1479 C 5441.666666666666 1479.6666666666665 5448 1481.3333333333333 5454 1484 L 5595 1540" id="v-3198" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9920041850608888,0.12620497938545017,-0.12620497938545017,0.9920041850608888,670,1058.6300048828125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3200" transform="matrix(-0.928476707906966,-0.3713906337998342,0.3713906337998342,-0.928476707906966,5591.286192772322,1549.2848062295675)" style="opacity: 1;"></path><path  d="M 670 1059 L 1614 1179 C 1620.6666666666665 1179.6666666666665 1627.333333333333 1180.3333333333333 1634 1181 L 5435 1479 C 5441.666666666666 1479.6666666666665 5448 1481.3333333333333 5454 1484 L 5595 1540" id="v-3199" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3192"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3135.595703125,1298.7257080078125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3195" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.59186553955078" height="60.23430061340332" transform="matrix(1,0,0,1,-56.8,-30.1)"></rect><text joint-selector="text" id="v-3194" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-3193"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3125.595703125,1340.7257080078125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3197" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3196" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1624, 1180)" id="v-4494"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(5445, 1480)" id="v-4495"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3202" display="none"><g  id="v-3190"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3191"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3201" display="none"><g  id="v-3187" transform="translate(709.6806817703542, 1064.0441544623332) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_222" ><path  stroke="#707070" d="M 7411 1735 L 8132 2069 C 8137.879061184978 2072.1001009024158 8144.212394518312 2074.1001009024158 8151 2075 L 8957 2196" id="v-3215" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9068827657428605,0.42138301958975527,-0.42138301958975527,0.9068827657428605,7411,1734.5400390625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3217" transform="matrix(-0.9889127656993255,-0.14849761559335214,0.14849761559335214,-0.9889127656993255,8955.51547962606,2206.0992014691765)" style="opacity: 1;"></path><path  d="M 7411 1735 L 8132 2069 C 8137.879061184978 2072.1001009024158 8144.212394518312 2074.1001009024158 8151 2075 L 8957 2196" id="v-3216" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3209"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8151.19921875,2075.030029296875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3212" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.349609375" height="65.73533630371094" transform="matrix(1,0,0,1,-76.2,-32.9)"></rect><text joint-selector="text" id="v-3211" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-20.9)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-3210"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8141.19921875,2117.030029296875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3214" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3213" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(8140.818591777468, 2073.6501513536236)" id="v-4496"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3219" display="none"><g  id="v-3207"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3208"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3218" display="none"><g  id="v-3206" transform="translate(7447.294765854009, 1751.8133866785563) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_223" ><path  stroke="#707070" d="M 6795 2090 L 6803 2085 C 6808.333333333332 2081.6666666666665 6814.333333333332 2079.6666666666665 6821 2079 L 9347 1781 C 9353.666666666666 1780.333333333333 9360.333333333332 1778.9999999999998 9367 1777 L 9616 1700" id="v-3234" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8489509149830227,-0.5284717059119519,0.5284717059119519,0.8489509149830227,6795,2089.9599609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3236" transform="matrix(-0.9551781507690984,0.2960315866479884,-0.2960315866479884,-0.9551781507690984,9618.96033956167,1709.281773258398)" style="opacity: 1;"></path><path  d="M 6795 2090 L 6803 2085 C 6808.333333333332 2081.6666666666665 6814.333333333332 2079.6666666666665 6821 2079 L 9347 1781 C 9353.666666666666 1780.333333333333 9360.333333333332 1778.9999999999998 9367 1777 L 9616 1700" id="v-3235" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3225"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8209.3720703125,1915.20947265625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3229" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="154.2996826171875" height="31.434292793273926" transform="matrix(1,0,0,1,-77.1,-15.7)"></rect><text joint-selector="text" id="v-3228" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >consume SNC</tspan></text></g><g id="v-3226"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8209.3720703125,1942.20947265625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3231" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="134.79893493652344" height="18.266109466552734" transform="matrix(1,0,0,1,-67.4,-9.1)"></rect><text joint-selector="text" id="v-3230" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-7.1)"><tspan dy="0" >[SAP SNC Access]</tspan></text></g><g id="v-3227"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,8199.3720703125,1951.45947265625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3233" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3232" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6811, 2080)" id="v-4497"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(9357, 1780)" id="v-4498"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3238" display="none"><g  id="v-3223"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3224"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3237" display="none"><g  id="v-3220" transform="translate(6832.3454032423215, 2077.661547836021) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_224" ><path  stroke="#707070" d="M 7151 669 L 7352 880" id="v-3248" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.68963287979316,0.724159161447394,-0.724159161447394,0.68963287979316,7151.22021484375,669)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3250" transform="matrix(-0.6896329280069712,-0.7241591155323059,0.7241591155323059,-0.6896329280069712,7344.918409999747,886.8963432869549)" style="opacity: 1;"></path><path  d="M 7151 669 L 7352 880" id="v-3249" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3242"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7251.5,774.5)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3245" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="93.11607360839844" height="31.434292793273926" transform="matrix(1,0,0,1,-46.6,-15.7)"></rect><text joint-selector="text" id="v-3244" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >discover</tspan></text></g><g id="v-3243"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7241.5,801.5)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3247" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3246" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3252" display="none"><g  id="v-3240"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3241"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3251" display="none"><g  id="v-3239" transform="translate(7178.589634169645, 697.9622527850504) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_225" ><path  stroke="#707070" d="M 6795 2125 L 6974 2042 C 6979.774234707211 2038.9682142994034 6984.107568040544 2034.6348809660699 6987 2029 L 7111 1780" id="v-3265" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9061972318947704,-0.42285526709059185,0.42285526709059185,0.9061972318947704,6795,2125.02001953125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3267" transform="matrix(-0.4465252561208366,0.894771029731194,-0.894771029731194,-0.4465252561208366,7120.08776754602,1784.4652961701463)" style="opacity: 1;"></path><path  d="M 6795 2125 L 6974 2042 C 6979.774234707211 2038.9682142994034 6984.107568040544 2034.6348809660699 6987 2029 L 7111 1780" id="v-3266" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3259"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7000.8583984375,2001.1708984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3262" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.55667114257812" height="60.23430061340332" transform="matrix(1,0,0,1,-86.8,-30.1)"></rect><text joint-selector="text" id="v-3261" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-3260"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6990.8583984375,2043.1708984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3264" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3263" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6982.661352060816, 2037.452321449105)" id="v-4499"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3269" display="none"><g  id="v-3257"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3258"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3268" display="none"><g  id="v-3256" transform="translate(6831.288650705817, 2108.1734189464646) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_226" ><path  stroke="#707070" d="M 670 1173 L 1616 1775 C 1621.333333333333 1778.333333333333 1627.333333333333 1780.333333333333 1634 1781 L 6345 2210" id="v-3283" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8437499883035501,0.536736394553005,-0.536736394553005,0.8437499883035501,670,1173.1300048828125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3285" transform="matrix(-0.9958865754784691,-0.09060865732239591,0.09060865732239591,-0.9958865754784691,6344.093794806561,2219.4889757655083)" style="opacity: 1;"></path><path  d="M 670 1173 L 1616 1775 C 1621.333333333333 1778.333333333333 1627.333333333333 1780.333333333333 1634 1781 L 6345 2210" id="v-3284" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3277"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3421.62744140625,1943.78759765625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3280" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.59186553955078" height="60.23430061340332" transform="matrix(1,0,0,1,-56.8,-30.1)"></rect><text joint-selector="text" id="v-3279" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-3278"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3411.62744140625,1985.78759765625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3282" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3281" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1624, 1780)" id="v-4500"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3287" display="none"><g  id="v-3275"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3276"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3286" display="none"><g  id="v-3273" transform="translate(703.7464595092843, 1194.4750196877264) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_227" ><path  stroke="#707070" d="M 4788 580 L 5673 1480" id="v-3300" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.7008376970776482,0.713320771010419,-0.713320771010419,0.7008376970776482,4788.3798828125,580)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3302" transform="matrix(-0.7008376495854436,-0.7133208176715096,0.7133208176715096,-0.7008376495854436,5665.496750350389,1487.0084059616318)" style="opacity: 1;"></path><path  d="M 4788 580 L 5673 1480" id="v-3301" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3294"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5230.5,1030)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3297" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.02508544921875" height="60.23430061340332" transform="matrix(1,0,0,1,-82.5,-30.1)"></rect><text joint-selector="text" id="v-3296" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-3295"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5220.5,1072)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3299" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3298" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3304" display="none"><g  id="v-3292"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3293"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3303" display="none"><g  id="v-3291" transform="translate(4816.04559807255, 608.5209471924234) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_228" ><path  stroke="#707070" d="M 670 1065 L 4095 1595" id="v-3317" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9882239319375405,0.1530145755995399,-0.1530145755995399,0.9882239319375405,670,1064.8399658203125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3319" transform="matrix(-0.9882239319375405,-0.15301457559953988,0.15301457559953988,-0.9882239319375405,4093.46976934463,1605.0422678878704)" style="opacity: 1;"></path><path  d="M 670 1065 L 4095 1595" id="v-3318" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3311"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2382.5,1330)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3314" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.59186553955078" height="60.23430061340332" transform="matrix(1,0,0,1,-56.8,-30.1)"></rect><text joint-selector="text" id="v-3313" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-3312"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2372.5,1372)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3316" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3315" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3321" display="none"><g  id="v-3309"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3310"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3320" display="none"><g  id="v-3308" transform="translate(709.529515592256, 1071.116976135444) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_229" ><path  stroke="#707070" d="M 9616 568 L 7650 1775 C 7644 1778.333333333333 7638 1781.333333333333 7632 1784 L 6795 2135" id="v-3335" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8523230242584776,0.5230157381177765,-0.5230157381177765,-0.8523230242584776,9616,568.0700073242188)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3337" transform="matrix(0.9219276192130096,-0.38736218830989694,0.38736218830989694,0.9219276192130096,6791.126340206021,2126.2407714722194)" style="opacity: 1;"></path><path  d="M 9616 568 L 7650 1775 C 7644 1778.333333333333 7638 1781.333333333333 7632 1784 L 6795 2135" id="v-3336" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3326"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8237.6826171875,1414.2000732421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3330" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="107.74163818359375" height="31.434292793273926" transform="matrix(1,0,0,1,-53.9,-15.7)"></rect><text joint-selector="text" id="v-3329" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >Authorize</tspan></text></g><g id="v-3327"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8237.6826171875,1441.2000732421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3332" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="328.10009765625" height="19.648223876953125" transform="matrix(1,0,0,1,-164.1,-9.8)"></rect><text joint-selector="text" id="v-3331" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-7.8)"><tspan dy="0" >[Single Sign On with optional Multi Factor]</tspan></text></g><g id="v-3328"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,8227.6826171875,1450.4500732421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3334" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3333" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7641, 1780)" id="v-4501"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3339" display="none"><g  id="v-3324"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3325"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3338" display="none"><g  id="v-3322" transform="translate(9581.911658995048, 588.9280913494293) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_230" ><path  stroke="#707070" d="M 4131 2980 L 4039 3077 C 4034.333333333333 3081.6666666666665 4028.6666666666665 3084.6666666666665 4022 3086 L 2649 3382" id="v-3350" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.68980994850411,0.723990493683969,-0.723990493683969,-0.68980994850411,4131.08984375,2980)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3352" transform="matrix(0.9776234959069544,-0.21036230710530154,0.21036230710530154,0.9776234959069544,2646.8962650167527,3371.813716236984)" style="opacity: 1;"></path><path  d="M 4131 2980 L 4039 3077 C 4034.333333333333 3081.6666666666665 4028.6666666666665 3084.6666666666665 4022 3086 L 2649 3382" id="v-3351" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3344"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3410.385009765625,3217.855712890625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3347" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="129.98390197753906" height="31.434292793273926" transform="matrix(1,0,0,1,-64.5,-15.7)"></rect><text joint-selector="text" id="v-3346" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-3345"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3400.385009765625,3244.855712890625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3349" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3348" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(4032, 3084)" id="v-4502"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3354" display="none"><g  id="v-3342"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3343"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3353" display="none"><g  id="v-3340" transform="translate(4103.473620633766, 3009.022378244833) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_231" ><path  stroke="#707070" d="M 7373 1480 L 7466 1405 C 7471.2362721919035 1400.7850135121644 7473.90293885857 1395.4516801788309 7474 1389 L 7486 1180" id="v-3367" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.7794879295741497,-0.6264172472467576,0.6264172472467576,0.7794879295741497,7372.66015625,1480)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3369" transform="matrix(-0.05727613565284433,0.9983583746754855,-0.9983583746754855,-0.05727613565284433,7496.383493540783,1180.5728201878985)" style="opacity: 1;"></path><path  d="M 7373 1480 L 7466 1405 C 7471.2362721919035 1400.7850135121644 7473.90293885857 1395.4516801788309 7474 1389 L 7486 1180" id="v-3368" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3361"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7476.044921875,1353.3848876953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3364" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.55667114257812" height="60.23430061340332" transform="matrix(1,0,0,1,-86.8,-30.1)"></rect><text joint-selector="text" id="v-3363" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-3362"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7466.044921875,1395.3848876953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3366" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3365" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7473.854408287857, 1398.6775202682466)" id="v-4503"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3371" display="none"><g  id="v-3359"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3360"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3370" display="none"><g  id="v-3358" transform="translate(7404.136521579014, 1454.8899019524088) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_232" ><path  stroke="#707070" d="M 4320 1180 L 4320 1480" id="v-3381" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(6.123233995736766e-17,1,-1,6.123233995736766e-17,4320,1180)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3383" transform="matrix(-1.8369701987210297e-16,-1,1,-1.8369701987210297e-16,4310.000000000001,1480)" style="opacity: 1;"></path><path  d="M 4320 1180 L 4320 1480" id="v-3382" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3375"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,4320,1330)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3378" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.94720458984375" height="31.434292793273926" transform="matrix(1,0,0,1,-45,-15.7)"></rect><text joint-selector="text" id="v-3377" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >monitor</tspan></text></g><g id="v-3376"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,4310,1357)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3380" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3379" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3385" display="none"><g  id="v-3373"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3374"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3384" display="none"><g  id="v-3372" transform="translate(4320, 1220) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_233" ><path  stroke="#707070" d="M 4416 468 L 1971 878 C 1964.3333333333333 879.3333333333333 1958.6666666666665 882.3333333333333 1954 887 L 1352 1473 C 1347.3333333333333 1477.6666666666665 1345 1483.3333333333333 1345 1490 L 1345 3074 C 1345 3080.6666666666665 1348.3333333333333 3085 1355 3087 L 2199 3358" id="v-3401" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9861942887640697,0.1655923452612791,-0.1655923452612791,-0.9861942887640697,4416,467.7799987792969)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3403" transform="matrix(-0.9522394645394077,-0.30535225915932285,0.30535225915932285,-0.9522394645394077,2195.946411116301,3367.3723039557367)" style="opacity: 1;"></path><path  d="M 4416 468 L 1971 878 C 1964.3333333333333 879.3333333333333 1958.6666666666665 882.3333333333333 1954 887 L 1352 1473 C 1347.3333333333333 1477.6666666666665 1345 1483.3333333333333 1345 1490 L 1345 3074 C 1345 3080.6666666666665 1348.3333333333333 3085 1355 3087 L 2199 3358" id="v-3402" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3395"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1649.961669921875,1182.95751953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3398" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="149.66842651367188" height="60.23430061340332" transform="matrix(1,0,0,1,-74.3,-30.1)"></rect><text joint-selector="text" id="v-3397" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >mount global</tspan><tspan dy="1.2em" x="0" >Instance conf</tspan></text></g><g id="v-3396"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1639.961669921875,1224.95751953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3400" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3399" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1961, 880)" id="v-4504"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(1345, 1480)" id="v-4505"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(1345, 3084)" id="v-4506"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3405" display="none"><g  id="v-3393"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3394"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3404" display="none"><g  id="v-3389" transform="translate(4376.550803636349, 474.6152026622074) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_234" ><path  stroke="#707070" d="M 6712 2380 L 6804 2477 C 6808.666666666666 2481.6666666666665 6813.666666666666 2486 6819 2490 L 7070 2674 C 7075.333333333332 2678 7077.999999999999 2683.333333333333 7078 2690 L 7078 3074 C 7077.999999999999 3080.6666666666665 7074.666666666666 3084.333333333333 7068 3085 L 2649 3413" id="v-3418" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.6883093704992261,0.7254172664632121,-0.7254172664632121,0.6883093704992261,6712.31982421875,2380)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3420" transform="matrix(0.9972478952145883,-0.07413929787955541,0.07413929787955541,0.9972478952145883,2648.2585401784336,3403.2974784797752)" style="opacity: 1;"></path><path  d="M 6712 2380 L 6804 2477 C 6808.666666666666 2481.6666666666665 6813.666666666666 2486 6819 2490 L 7070 2674 C 7075.333333333332 2678 7077.999999999999 2683.333333333333 7078 2690 L 7078 3074 C 7077.999999999999 3080.6666666666665 7074.666666666666 3084.333333333333 7068 3085 L 2649 3413" id="v-3419" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3412"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5299.32568359375,3216.27978515625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3415" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="129.98390197753906" height="31.434292793273926" transform="matrix(1,0,0,1,-64.5,-15.7)"></rect><text joint-selector="text" id="v-3414" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-3413"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5289.32568359375,3243.27978515625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3417" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3416" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6811, 2484)" id="v-4507"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(7078, 2680)" id="v-4508"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(7078, 3084)" id="v-4509"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3422" display="none"><g  id="v-3410"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3411"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3421" display="none"><g  id="v-3406" transform="translate(6739.526379366234, 2409.0223782448334) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_235" ><path  stroke="#707070" d="M 7544 1180 L 7638 1470 C 7640 1476.6666666666665 7641 1483.3333333333333 7641 1490 L 7641 1770 C 7641 1776.6666666666665 7639 1782.6666666666665 7635 1788 L 7088 2476 C 7084 2481.333333333333 7078.666666666666 2484.333333333333 7072 2485 L 5059 2679 C 5052.333333333333 2679.6666666666665 5045.666666666666 2680.6666666666665 5039 2682 L 4499 2786" id="v-3439" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.30859854316155516,0.951192377575938,-0.951192377575938,0.30859854316155516,7543.669921875,1180)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3441" transform="matrix(0.9817804299927354,-0.19001891296205115,0.19001891296205115,0.9817804299927354,4497.099877664202,2776.6321895171936)" style="opacity: 1;"></path><path  d="M 7544 1180 L 7638 1470 C 7640 1476.6666666666665 7641 1483.3333333333333 7641 1490 L 7641 1770 C 7641 1776.6666666666665 7639 1782.6666666666665 7635 1788 L 7088 2476 C 7084 2481.333333333333 7078.666666666666 2484.333333333333 7072 2485 L 5059 2679 C 5052.333333333333 2679.6666666666665 5045.666666666666 2680.6666666666665 5039 2682 L 4499 2786" id="v-3440" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3433"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6539.396484375,2536.328857421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3436" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="189.40103149414062" height="31.434292793273926" transform="matrix(1,0,0,1,-94.7,-15.7)"></rect><text joint-selector="text" id="v-3435" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >create renditions</tspan></text></g><g id="v-3434"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6529.396484375,2563.328857421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3438" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3437" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7641, 1480)" id="v-4510"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(7641, 1780)" id="v-4511"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(7082, 2484)" id="v-4512"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(5049, 2680)" id="v-4513"><circle  idx="3" r="10"></circle><path  idx="3" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="3" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3443" display="none"><g  id="v-3431"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3432"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3442" display="none"><g  id="v-3426" transform="translate(7556.333770321078, 1218.0509935437547) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_236" ><path  stroke="#707070" d="M 4561 580 L 4400 880" id="v-3456" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.4717319794492812,0.8817419914945999,-0.8817419914945999,-0.4717319794492812,4560.75,580)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3458" transform="matrix(0.4717320968603253,-0.8817419286796793,0.8817419286796793,0.4717320968603253,4391.43254490085,875.2826544705375)" style="opacity: 1;"></path><path  d="M 4561 580 L 4400 880" id="v-3457" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3450"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,4480.5,730)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3453" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.02508544921875" height="60.23430061340332" transform="matrix(1,0,0,1,-82.5,-30.1)"></rect><text joint-selector="text" id="v-3452" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-3451"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,4470.5,772)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3455" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3454" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3460" display="none"><g  id="v-3448"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3449"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3459" display="none"><g  id="v-3447" transform="translate(4542.085066973826, 615.2452168189578) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_237" ><path  stroke="#707070" d="M 2870 1659 L 3785 1779 C 3791.6666666666665 1779.6666666666665 3798.333333333333 1780.333333333333 3805 1781 L 7739 2079 C 7745.666666666666 2079.6666666666665 7752.333333333333 2080.333333333333 7759 2081 L 8957 2206" id="v-3475" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9916007105218476,0.1293368891405968,-0.1293368891405968,0.9916007105218476,2870,1659.3499755859375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3477" transform="matrix(-0.9945659571095018,-0.10410839043449213,0.10410839043449213,-0.9945659571095018,8955.959263166751,2216.3956790223147)" style="opacity: 1;"></path><path  d="M 2870 1659 L 3785 1779 C 3791.6666666666665 1779.6666666666665 3798.333333333333 1780.333333333333 3805 1781 L 7739 2079 C 7745.666666666666 2079.6666666666665 7752.333333333333 2080.333333333333 7759 2081 L 8957 2206" id="v-3476" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3469"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5912.431640625,1940.6376953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3472" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.349609375" height="65.73533630371094" transform="matrix(1,0,0,1,-76.2,-32.9)"></rect><text joint-selector="text" id="v-3471" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-20.9)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-3470"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5902.431640625,1982.6376953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3474" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3473" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(3795, 1780)" id="v-4514"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(7749, 2080)" id="v-4515"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3479" display="none"><g  id="v-3467"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3468"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3478" display="none"><g  id="v-3464" transform="translate(2909.660381224057, 1664.2013614720074) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_238" ><path  stroke="#707070" d="M 7185 1780 L 7178 2474 C 7178 2480.6666666666665 7174.666666666666 2484.6666666666665 7168 2486 L 5649 2786" id="v-3493" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.009360341908067334,0.9999561910400696,-0.9999561910400696,-0.009360341908067334,7184.58984375,1780)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3495" transform="matrix(0.9810930822533678,-0.1935364667306565,0.1935364667306565,0.9810930822533678,5647.06473966641,2775.809004157273)" style="opacity: 1;"></path><path  d="M 7185 1780 L 7178 2474 C 7178 2480.6666666666665 7174.666666666666 2484.6666666666665 7168 2486 L 5649 2786" id="v-3494" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3487"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6757.388671875,2567.094970703125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3490" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="188.6697540283203" height="31.434292793273926" transform="matrix(1,0,0,1,-94.3,-15.7)"></rect><text joint-selector="text" id="v-3489" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >store documents</tspan></text></g><g id="v-3488"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6747.388671875,2594.094970703125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3492" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3491" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7178, 2484)" id="v-4516"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3497" display="none"><g  id="v-3485"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3486"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3496" display="none"><g  id="v-3483" transform="translate(7184.596562308408, 1819.9979654236188) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_239" ><path  stroke="#707070" d="M 4095 1169 L 4086 1175 C 4080.6666666666665 1178.3333333333333 4074.6666666666665 1180.3333333333333 4068 1181 L 1430 1479 C 1423.3333333333333 1479.6666666666665 1420 1483.3333333333333 1420 1490 L 1420 3074 C 1420 3080.6666666666665 1423 3085 1429 3087 L 2199 3352" id="v-3510" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8499026286824363,0.5269397705228606,-0.5269397705228606,-0.8499026286824363,4095,1169.4599609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3512" transform="matrix(-0.9454330528149689,-0.32581642476242395,0.32581642476242395,-0.9454330528149689,2195.7418205774006,3361.9143990726484)" style="opacity: 1;"></path><path  d="M 4095 1169 L 4086 1175 C 4080.6666666666665 1178.3333333333333 4074.6666666666665 1180.3333333333333 4068 1181 L 1430 1479 C 1423.3333333333333 1479.6666666666665 1420 1483.3333333333333 1420 1490 L 1420 3074 C 1420 3080.6666666666665 1423 3085 1429 3087 L 2199 3352" id="v-3511" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3504"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1555.5172119140625,1464.821044921875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3507" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.83562469482422" height="31.434292793273926" transform="matrix(1,0,0,1,-56.9,-15.7)"></rect><text joint-selector="text" id="v-3506" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >mount etc</tspan></text></g><g id="v-3505"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1545.5172119140625,1491.821044921875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3509" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3508" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(4078, 1180)" id="v-4517"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(1420, 1480)" id="v-4518"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(1420, 3084)" id="v-4519"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3514" display="none"><g  id="v-3502"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3503"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3513" display="none"><g  id="v-3498" transform="translate(4058.022053806235, 1182.1271523751866) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_240" ><path  stroke="#707070" d="M 4095 1111 L 2870 1549" id="v-3524" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9414250388256671,0.33722232469409724,-0.33722232469409724,-0.9414250388256671,4095,1110.5999755859375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3526" transform="matrix(0.9414250388256671,-0.33722232469409735,0.33722232469409735,0.9414250388256671,2866.6278330054274,1539.9858048899348)" style="opacity: 1;"></path><path  d="M 4095 1111 L 2870 1549" id="v-3525" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3518"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3482.5,1330)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3521" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.94720458984375" height="31.434292793273926" transform="matrix(1,0,0,1,-45,-15.7)"></rect><text joint-selector="text" id="v-3520" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >monitor</tspan></text></g><g id="v-3519"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3472.5,1357)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3523" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3522" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3528" display="none"><g  id="v-3516"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3517"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3527" display="none"><g  id="v-3515" transform="translate(4057.3351954030677, 1124.4670893171071) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_241" ><path  stroke="#707070" d="M 4508 1180 L 4883 1480" id="v-3538" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.7808688000832672,0.624695059254128,-0.624695059254128,0.7808688000832672,4507.5,1180)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3540" transform="matrix(-0.7808688416748548,-0.6246950072646416,0.6246950072646416,-0.7808688416748548,4876.253144594102,1487.808690247207)" style="opacity: 1;"></path><path  d="M 4508 1180 L 4883 1480" id="v-3539" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3532"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,4695.5,1330)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3535" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.94720458984375" height="31.434292793273926" transform="matrix(1,0,0,1,-45,-15.7)"></rect><text joint-selector="text" id="v-3534" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >monitor</tspan></text></g><g id="v-3533"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,4685.5,1357)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3537" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3536" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3542" display="none"><g  id="v-3530"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3531"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3541" display="none"><g  id="v-3529" transform="translate(4539.234752377722, 1204.9878019021771) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_242" ><path  stroke="#707070" d="M 4416 469 L 2046 878 C 2039.3333333333333 879.3333333333333 2036 883.3333333333333 2036 890 L 2036 1770 C 2036 1776.6666666666665 2039.3333333333333 1780.6666666666665 2046 1782 L 3318 2078 C 3324.6666666666665 2079.333333333333 3329.6666666666665 2083 3333 2089 L 3573 2475 C 3576.333333333333 2481 3580.9999999999995 2485.333333333333 3587 2488 L 4049 2718" id="v-3559" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9854056228529452,0.1702226731366862,-0.1702226731366862,-0.9854056228529452,4416,468.8699951171875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3561" transform="matrix(-0.8954514998741022,-0.4451590854663316,0.4451590854663316,-0.8954514998741022,4044.548334300328,2727.104592181529)" style="opacity: 1;"></path><path  d="M 4416 469 L 2046 878 C 2039.3333333333333 879.3333333333333 2036 883.3333333333333 2036 890 L 2036 1770 C 2036 1776.6666666666665 2039.3333333333333 1780.6666666666665 2046 1782 L 3318 2078 C 3324.6666666666665 2079.333333333333 3329.6666666666665 2083 3333 2089 L 3573 2475 C 3576.333333333333 2481 3580.9999999999995 2485.333333333333 3587 2488 L 4049 2718" id="v-3560" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3553"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2036,1285.1295166015625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3556" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.02508544921875" height="60.23430061340332" transform="matrix(1,0,0,1,-82.5,-30.1)"></rect><text joint-selector="text" id="v-3555" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-3554"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2026,1327.1295166015625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3558" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3557" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2036, 880)" id="v-4520"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(2036, 1780)" id="v-4521"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(3328, 2080)" id="v-4522"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(3578, 2484)" id="v-4523"><circle  idx="3" r="10"></circle><path  idx="3" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="3" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3563" display="none"><g  id="v-3551"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3552"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3562" display="none"><g  id="v-3546" transform="translate(4376.582652137984, 475.8024030698585) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_243" ><path  stroke="#707070" d="M 7003 669 L 7157 1480" id="v-3573" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.1870347366831263,0.982353300637746,-0.982353300637746,0.1870347366831263,7003.02978515625,669)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3575" transform="matrix(-0.18703473668312645,-0.9823533006377458,0.9823533006377458,-0.18703473668312645,7147.616638579204,1481.8703940450837)" style="opacity: 1;"></path><path  d="M 7003 669 L 7157 1480" id="v-3574" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3567"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7080,1074.5)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3570" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="93.11607360839844" height="31.434292793273926" transform="matrix(1,0,0,1,-46.6,-15.7)"></rect><text joint-selector="text" id="v-3569" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >discover</tspan></text></g><g id="v-3568"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7070,1101.5)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3572" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3571" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3577" display="none"><g  id="v-3565"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3566"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3576" display="none"><g  id="v-3564" transform="translate(7010.462216702432, 708.2977775692972) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_244" ><path  stroke="#707070" d="M 4545 1720 L 4686 1776 C 4692 1778.6666666666665 4698.333333333333 1780.6666666666665 4705 1782 L 6345 2176" id="v-3591" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9284766955435519,0.371390664708372,-0.371390664708372,0.9284766955435519,4545,1720)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3593" transform="matrix(-0.9723873253673182,-0.2333728550302996,0.2333728550302996,-0.9723873253673182,6342.66651189087,2185.7238615696006)" style="opacity: 1;"></path><path  d="M 4545 1720 L 4686 1776 C 4692 1778.6666666666665 4698.333333333333 1780.6666666666665 4705 1782 L 6345 2176" id="v-3592" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3582"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5441.53662109375,1958.9483642578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3586" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="102.13516998291016" height="31.434292793273926" transform="matrix(1,0,0,1,-51.1,-15.7)"></rect><text joint-selector="text" id="v-3585" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >consume</tspan></text></g><g id="v-3583"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5441.53662109375,1985.9483642578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3588" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="312.0119934082031" height="19.631771087646484" transform="matrix(1,0,0,1,-156,-9.8)"></rect><text joint-selector="text" id="v-3587" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-7.8)"><tspan dy="0" >[Advanced Connector Protocol Adapter]</tspan></text></g><g id="v-3584"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,5431.53662109375,1995.1983642578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3590" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3589" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(4695, 1780)" id="v-4524"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3595" display="none"><g  id="v-3580"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3581"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3594" display="none"><g  id="v-3578" transform="translate(4582.175322531106, 1734.7646671045527) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_245" ><path  stroke="#707070" d="M 7467 1180 L 7413 1470 C 7411.666666666666 1476.6666666666665 7410.999999999999 1483.3333333333333 7411 1490 L 7411 1770 C 7410.999999999999 1776.6666666666665 7407.999999999999 1781.6666666666665 7402 1785 L 6795 2110" id="v-3610" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.18349713122982308,0.9830202453817648,-0.9830202453817648,-0.18349713122982308,7467,1180)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3612" transform="matrix(0.8817122782920299,-0.47178751393935586,0.47178751393935586,0.8817122782920299,6790.281896608936,2100.7928422002237)" style="opacity: 1;"></path><path  d="M 7467 1180 L 7413 1470 C 7411.666666666666 1476.6666666666665 7410.999999999999 1483.3333333333333 7411 1490 L 7411 1770 C 7410.999999999999 1776.6666666666665 7407.999999999999 1781.6666666666665 7402 1785 L 6795 2110" id="v-3611" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3604"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7368.95654296875,1802.692138671875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3607" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.55667114257812" height="60.23430061340332" transform="matrix(1,0,0,1,-86.8,-30.1)"></rect><text joint-selector="text" id="v-3606" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-3605"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7358.95654296875,1844.692138671875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3609" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3608" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7411, 1480)" id="v-4525"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(7411, 1780)" id="v-4526"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3614" display="none"><g  id="v-3602"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3603"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3613" display="none"><g  id="v-3599" transform="translate(7459.677587455232, 1219.32406737005) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_246" ><path  stroke="#707070" d="M 5295 1663 L 8957 2197" id="v-3627" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.989521465554519,0.1443858345089185,-0.1443858345089185,0.989521465554519,5295,1662.8299560546875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3629" transform="matrix(-0.9895214751675853,-0.14438576862754166,0.14438576862754166,-0.9895214751675853,8955.5558492529,2207.065146656701)" style="opacity: 1;"></path><path  d="M 5295 1663 L 8957 2197" id="v-3628" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3621"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7126,1930)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3624" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.349609375" height="65.73533630371094" transform="matrix(1,0,0,1,-76.2,-32.9)"></rect><text joint-selector="text" id="v-3623" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-20.9)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-3622"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7116,1972)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3626" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3625" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3631" display="none"><g  id="v-3619"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3620"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3630" display="none"><g  id="v-3618" transform="translate(5334.5813835501085, 1668.7718347394205) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_247" ><path  stroke="#707070" d="M 9616 1729 L 9420 1815 C 9413.676891027964 1817.7234519790472 9409.010224361296 1822.0567853123805 9406 1828 L 9265 2080" id="v-3644" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.915574494593016,0.40214841147360425,-0.40214841147360425,-0.915574494593016,9616,1728.8299560546875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3646" transform="matrix(0.4860082637731403,-0.8739542136429217,0.8739542136429217,0.4860082637731403,9256.68064866334,2075.139957545573)" style="opacity: 1;"></path><path  d="M 9616 1729 L 9420 1815 C 9413.676891027964 1817.7234519790472 9409.010224361296 1822.0567853123805 9406 1828 L 9265 2080" id="v-3645" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3635"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,9392.5185546875,1852.0941162109375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3639" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="135.7739715576172" height="31.434292793273926" transform="matrix(1,0,0,1,-67.9,-15.7)"></rect><text joint-selector="text" id="v-3638" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >consume AL</tspan></text></g><g id="v-3636"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,9392.5185546875,1879.0941162109375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3641" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="210.3643341064453" height="18.266109466552734" transform="matrix(1,0,0,1,-105.2,-9.1)"></rect><text joint-selector="text" id="v-3640" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-7.1)"><tspan dy="0" >[SAP Archive Link Protocol]</tspan></text></g><g id="v-3637"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,9382.5185546875,1888.3441162109375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3643" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3642" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(9410.515336541946, 1819.0851779685709)" id="v-4527"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3648" display="none"><g  id="v-3633"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3634"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3647" display="none"><g  id="v-3632" transform="translate(9579.370884080206, 1745.0719590260312) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_248" ><path  stroke="#707070" d="M 8957 2200 L 8059 2081 C 8052.333333333333 2080.333333333333 8045.666666666666 2079.6666666666665 8039 2079 L 4105 1781 C 4098.333333333333 1780.333333333333 4091.6666666666665 1779.6666666666665 4085 1779 L 2870 1653" id="v-3663" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9913500157718974,-0.13124460457123077,0.13124460457123077,-0.9913500157718974,8957,2200.2099609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3665" transform="matrix(0.9946921377794327,0.10289582615335824,-0.10289582615335824,0.9946921377794327,2871.0290583681144,1643.33308032161)" style="opacity: 1;"></path><path  d="M 8957 2200 L 8059 2081 C 8052.333333333333 2080.333333333333 8045.666666666666 2079.6666666666665 8039 2079 L 4105 1781 C 4098.333333333333 1780.333333333333 4091.6666666666665 1779.6666666666665 4085 1779 L 2870 1653" id="v-3664" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3657"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5914.6181640625,1918.078369140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3660" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.55667114257812" height="60.23430061340332" transform="matrix(1,0,0,1,-86.8,-30.1)"></rect><text joint-selector="text" id="v-3659" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-3658"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5904.6181640625,1960.078369140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3662" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3661" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(8049, 2080)" id="v-4528"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(4095, 1780)" id="v-4529"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3667" display="none"><g  id="v-3655"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3656"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3666" display="none"><g  id="v-3652" transform="translate(8917.346654542613, 2194.745269365892) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_249" ><path  stroke="#707070" d="M 4095 1681 L 2355 2078 C 2348.333333333333 2079.333333333333 2345 2083.333333333333 2345 2090 L 2345 3074 C 2345 3080.6666666666665 2345.6666666666665 3087.333333333333 2347 3094 L 2390 3280" id="v-3679" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.975011976054346,0.2221523048509727,-0.2221523048509727,-0.975011976054346,4095,1681.27001953125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3681" transform="matrix(-0.22258851374633976,-0.9749124850714527,0.9749124850714527,-0.22258851374633976,2380.000930208624,3282.225986550678)" style="opacity: 1;"></path><path  d="M 4095 1681 L 2355 2078 C 2348.333333333333 2079.333333333333 2345 2083.333333333333 2345 2090 L 2345 3074 C 2345 3080.6666666666665 2345.6666666666665 3087.333333333333 2347 3094 L 2390 3280" id="v-3680" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3673"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2634.057861328125,2014.329833984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3676" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="129.98390197753906" height="31.434292793273926" transform="matrix(1,0,0,1,-64.5,-15.7)"></rect><text joint-selector="text" id="v-3675" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-3674"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2624.057861328125,2041.329833984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3678" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3677" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2345, 2080)" id="v-4530"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(2345, 3084)" id="v-4531"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3683" display="none"><g  id="v-3671"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3672"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3682" display="none"><g  id="v-3668" transform="translate(4056.0021851973856, 1689.897777285424) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_250" ><path  stroke="#707070" d="M 6795 2230 L 7431 2230 C 7437.666666666666 2230 7444.333333333332 2230 7451 2230 L 8301 2230 C 8307.666666666666 2230 8314.333333333332 2230 8321 2230 L 8957 2230" id="v-3698" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(1,0,0,1,6795,2230)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3700" transform="matrix(-1,1.2246467991473532e-16,-1.2246467991473532e-16,-1,8957,2239.9999999999995)" style="opacity: 1;"></path><path  d="M 6795 2230 L 7431 2230 C 7437.666666666666 2230 7444.333333333332 2230 7451 2230 L 8301 2230 C 8307.666666666666 2230 8314.333333333332 2230 8321 2230 L 8957 2230" id="v-3699" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3692"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7876,2230)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3695" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.349609375" height="65.73533630371094" transform="matrix(1,0,0,1,-76.2,-32.9)"></rect><text joint-selector="text" id="v-3694" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-20.9)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-3693"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7866,2272)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3697" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3696" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7441, 2230)" id="v-4532"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(8311, 2230)" id="v-4533"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3702" display="none"><g  id="v-3690"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3691"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3701" display="none"><g  id="v-3687" transform="translate(6835, 2230) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_251" ><path  stroke="#707070" d="M 7698 1180 L 8095 1474 C 8100.333333333333 1478 8103 1483.3333333333333 8103 1490 L 8103 2474 C 8103 2480.6666666666665 8099.666666666666 2484.333333333333 8093 2485 L 6205 2679 C 6198.333333333333 2679.6666666666665 6191.666666666666 2680.6666666666665 6185 2682 L 5649 2786" id="v-3718" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8037889763168106,0.5949145161715031,-0.5949145161715031,0.8037889763168106,7697.669921875,1180)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3720" transform="matrix(0.9815940369377004,-0.19097944038128378,0.19097944038128378,0.9815940369377004,5647.09018319556,2776.4141665344364)" style="opacity: 1;"></path><path  d="M 7698 1180 L 8095 1474 C 8100.333333333333 1478 8103 1483.3333333333333 8103 1490 L 8103 2474 C 8103 2480.6666666666665 8099.666666666666 2484.333333333333 8093 2485 L 6205 2679 C 6198.333333333333 2679.6666666666665 6191.666666666666 2680.6666666666665 6185 2682 L 5649 2786" id="v-3719" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3712"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7620.06201171875,2533.596435546875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3715" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="188.6697540283203" height="31.434292793273926" transform="matrix(1,0,0,1,-94.3,-15.7)"></rect><text joint-selector="text" id="v-3714" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >store documents</tspan></text></g><g id="v-3713"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7610.06201171875,2560.596435546875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3717" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3716" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(8103, 1480)" id="v-4534"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(8103, 2484)" id="v-4535"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(6195, 2680)" id="v-4536"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3722" display="none"><g  id="v-3710"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3711"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3721" display="none"><g  id="v-3706" transform="translate(7730.145156239779, 1203.8052290541432) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_252" ><path  stroke="#707070" d="M 4695 580 L 5016 1480" id="v-3735" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.33663457919232365,0.9416353647203397,-0.9416353647203397,0.33663457919232365,4694.6298828125,580)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3737" transform="matrix(-0.336634579192324,-0.9416353647203396,0.9416353647203396,-0.336634579192324,5006.96366401972,1483.366317603189)" style="opacity: 1;"></path><path  d="M 4695 580 L 5016 1480" id="v-3736" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3729"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,4855.5,1030)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3732" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.02508544921875" height="60.23430061340332" transform="matrix(1,0,0,1,-82.5,-30.1)"></rect><text joint-selector="text" id="v-3731" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-3730"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,4845.5,1072)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3734" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3733" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3739" display="none"><g  id="v-3727"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3728"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3738" display="none"><g  id="v-3726" transform="translate(4708.437543519047, 617.675355660879) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_253" ><path  stroke="#707070" d="M 7720 1141 L 8402 1476 C 8408 1478.6666666666665 8411 1483.3333333333333 8411 1490 L 8411 2474 C 8411 2480.6666666666665 8407.666666666666 2484.6666666666665 8401 2486 L 6795 2788" id="v-3754" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8975381857022109,0.4409367360590219,-0.4409367360590219,0.8975381857022109,7720,1140.530029296875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3756" transform="matrix(0.9827938530706158,-0.18470582656378956,0.18470582656378956,0.9827938530706158,6793.153128203656,2777.8821568443072)" style="opacity: 1;"></path><path  d="M 7720 1141 L 8402 1476 C 8408 1478.6666666666665 8411 1483.3333333333333 8411 1490 L 8411 2474 C 8411 2480.6666666666665 8407.666666666666 2484.6666666666665 8401 2486 L 6795 2788" id="v-3755" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3748"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8411,2418.893798828125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3751" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="170.63156127929688" height="31.434292793273926" transform="matrix(1,0,0,1,-85.3,-15.7)"></rect><text joint-selector="text" id="v-3750" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >store metadata</tspan></text></g><g id="v-3749"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8401,2445.893798828125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3753" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3752" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(8411, 1480)" id="v-4537"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(8411, 2484)" id="v-4538"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3758" display="none"><g  id="v-3746"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3747"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3757" display="none"><g  id="v-3743" transform="translate(7755.902538535657, 1158.6354111575445) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_254" ><path  stroke="#707070" d="M 7286 1780 L 7480 2072 C 7483.999999999999 2077.333333333333 7485.999999999999 2083.333333333333 7486 2090 L 7486 2474 C 7485.999999999999 2480.6666666666665 7482.999999999999 2485.333333333333 7477 2488 L 6795 2745" id="v-3773" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.5547001928166211,0.8320502966102491,-0.8320502966102491,0.5547001928166211,7286,1780)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3775" transform="matrix(0.9354874393176807,-0.35335994521004865,0.35335994521004865,0.9354874393176807,6791.466506623473,2735.655043418299)" style="opacity: 1;"></path><path  d="M 7286 1780 L 7480 2072 C 7483.999999999999 2077.333333333333 7485.999999999999 2083.333333333333 7486 2090 L 7486 2474 C 7485.999999999999 2480.6666666666665 7482.999999999999 2485.333333333333 7477 2488 L 6795 2745" id="v-3774" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3767"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7486,2470.338623046875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3770" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="170.63156127929688" height="31.434292793273926" transform="matrix(1,0,0,1,-85.3,-15.7)"></rect><text joint-selector="text" id="v-3769" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >store metadata</tspan></text></g><g id="v-3768"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7476,2497.338623046875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3772" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3771" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7486, 2080)" id="v-4539"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(7486, 2484)" id="v-4540"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3777" display="none"><g  id="v-3765"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3766"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3776" display="none"><g  id="v-3762" transform="translate(7308.135318728943, 1813.3170776744917) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_255" ><path  stroke="#707070" d="M 8957 2230 L 8321 2230 C 8314.333333333332 2230 8307.666666666666 2230 8301 2230 L 7451 2230 C 7444.333333333332 2230 7437.666666666666 2230 7431 2230 L 6795 2230" id="v-3792" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-1,1.2246467991473532e-16,-1.2246467991473532e-16,-1,8957,2230)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3794" transform="matrix(1,0,0,1,6795,2220.0000000000005)" style="opacity: 1;"></path><path  d="M 8957 2230 L 8321 2230 C 8314.333333333332 2230 8307.666666666666 2230 8301 2230 L 7451 2230 C 7444.333333333332 2230 7437.666666666666 2230 7431 2230 L 6795 2230" id="v-3793" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3786"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7876,2230)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3789" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.55667114257812" height="60.23430061340332" transform="matrix(1,0,0,1,-86.8,-30.1)"></rect><text joint-selector="text" id="v-3788" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-3787"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7866,2272)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3791" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3790" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(8311, 2230)" id="v-4541"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(7441, 2230)" id="v-4542"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3796" display="none"><g  id="v-3784"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3785"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3795" display="none"><g  id="v-3781" transform="translate(8917, 2230) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_256" ><path  stroke="#707070" d="M 6427 2380 L 6335 2477 C 6330.333333333332 2481.6666666666665 6324.999999999999 2485.333333333333 6319 2488 L 5649 2744" id="v-3810" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.68980994850411,0.723990493683969,-0.723990493683969,-0.68980994850411,6427.08984375,2380)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3812" transform="matrix(0.9339313845879862,-0.3574523309219945,0.3574523309219945,0.9339313845879862,5645.42551831365,2734.5406293852157)" style="opacity: 1;"></path><path  d="M 6427 2380 L 6335 2477 C 6330.333333333332 2481.6666666666665 6324.999999999999 2485.333333333333 6319 2488 L 5649 2744" id="v-3811" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3804"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6055.56201171875,2588.656982421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3807" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="188.6697540283203" height="31.434292793273926" transform="matrix(1,0,0,1,-94.3,-15.7)"></rect><text joint-selector="text" id="v-3806" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >store documents</tspan></text></g><g id="v-3805"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6045.56201171875,2615.656982421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3809" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3808" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6328, 2484)" id="v-4543"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3814" display="none"><g  id="v-3802"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3803"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3813" display="none"><g  id="v-3800" transform="translate(6399.473620633766, 2409.0223782448334) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_257" ><path  stroke="#707070" d="M 8957 2202 L 5605 1781 C 5598.333333333333 1780.333333333333 5591.666666666666 1778.9999999999998 5585 1777 L 5295 1694" id="v-3828" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9922225504590815,-0.12447654542312561,0.12447654542312561,-0.9922225504590815,8957,2201.77001953125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3830" transform="matrix(0.9615275757491837,0.27470842920066685,-0.27470842920066685,0.9615275757491837,5297.747042909515,1684.674749325502)" style="opacity: 1;"></path><path  d="M 8957 2202 L 5605 1781 C 5598.333333333333 1780.333333333333 5591.666666666666 1778.9999999999998 5585 1777 L 5295 1694" id="v-3829" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3822"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7121.220703125,1971.4322509765625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3825" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.55667114257812" height="60.23430061340332" transform="matrix(1,0,0,1,-86.8,-30.1)"></rect><text joint-selector="text" id="v-3824" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-3823"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7111.220703125,2013.4322509765625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3827" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3826" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5595, 1780)" id="v-4544"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3832" display="none"><g  id="v-3820"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3821"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3831" display="none"><g  id="v-3818" transform="translate(8917.311806279045, 2197.0152954783644) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_258" ><path  stroke="#707070" d="M 6045 1670 L 8957 2190" id="v-3845" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9844451227689077,0.17569234546931786,-0.17569234546931786,0.9844451227689077,6045,1670.1500244140625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3847" transform="matrix(-0.9844451022984065,-0.17569246017026413,0.17569246017026413,-0.9844451022984065,8955.242799858781,2199.694393202811)" style="opacity: 1;"></path><path  d="M 6045 1670 L 8957 2190" id="v-3846" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3839"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7501,1930)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3842" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.349609375" height="65.73533630371094" transform="matrix(1,0,0,1,-76.2,-32.9)"></rect><text joint-selector="text" id="v-3841" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-20.9)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-3840"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7491,1972)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3844" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3843" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3849" display="none"><g  id="v-3837"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3838"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3848" display="none"><g  id="v-3836" transform="translate(6084.37710302034, 1677.0316255393464) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_259" ><path  stroke="#707070" d="M 4545 1030 L 5368 1030 C 5374.666666666666 1030 5381.333333333333 1030 5388 1030 L 6426 1030 C 6432.666666666666 1030 6439.333333333332 1030 6446 1030 L 7270 1030" id="v-3861" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(1,0,0,1,4545,1030)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3863" transform="matrix(-1,1.2246467991473532e-16,-1.2246467991473532e-16,-1,7270,1039.9999999999995)" style="opacity: 1;"></path><path  d="M 4545 1030 L 5368 1030 C 5374.666666666666 1030 5381.333333333333 1030 5388 1030 L 6426 1030 C 6432.666666666666 1030 6439.333333333332 1030 6446 1030 L 7270 1030" id="v-3862" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3855"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5907.5,1030)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3858" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.94720458984375" height="31.434292793273926" transform="matrix(1,0,0,1,-45,-15.7)"></rect><text joint-selector="text" id="v-3857" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >monitor</tspan></text></g><g id="v-3856"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5897.5,1057)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3860" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3859" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5378, 1030)" id="v-4545"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(6436, 1030)" id="v-4546"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3865" display="none"><g  id="v-3853"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3854"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3864" display="none"><g  id="v-3850" transform="translate(4585, 1030) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_260" ><path  stroke="#707070" d="M 4095 1140 L 3412 1476 C 3406 1478.6666666666665 3403 1483.3333333333333 3403 1490 L 3403 1770 C 3403 1776.6666666666665 3405.333333333333 1782.333333333333 3410 1787 L 3725 2073 C 3729.6666666666665 2077.6666666666665 3734 2082.6666666666665 3738 2088 L 4166 2680" id="v-3878" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8977286737361023,0.44054878089948085,-0.44054878089948085,-0.8977286737361023,4095,1140.4100341796875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3880" transform="matrix(-0.5857272762721523,-0.8105082096011155,0.8105082096011155,-0.5857272762721523,4157.494866447961,2685.8573743899824)" style="opacity: 1;"></path><path  d="M 4095 1140 L 3412 1476 C 3406 1478.6666666666665 3403 1483.3333333333333 3403 1490 L 3403 1770 C 3403 1776.6666666666665 3405.333333333333 1782.333333333333 3410 1787 L 3725 2073 C 3729.6666666666665 2077.6666666666665 3734 2082.6666666666665 3738 2088 L 4166 2680" id="v-3879" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3872"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3446.2880859375,1819.947265625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3875" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.94720458984375" height="31.434292793273926" transform="matrix(1,0,0,1,-45,-15.7)"></rect><text joint-selector="text" id="v-3874" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >monitor</tspan></text></g><g id="v-3873"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3436.2880859375,1846.947265625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3877" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3876" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(3403, 1480)" id="v-4547"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(3403, 1780)" id="v-4548"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(3732, 2080)" id="v-4549"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3882" display="none"><g  id="v-3870"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3871"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3881" display="none"><g  id="v-3866" transform="translate(4059.108048573219, 1157.6569482860884) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_261" ><path  stroke="#707070" d="M 7308 1180 L 7215 1255 C 7209.763727808095 1259.2149864878356 7207.097061141428 1264.548319821169 7207 1271 L 7195 1480" id="v-3895" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.7794880963991261,0.6264170396565428,-0.6264170396565428,-0.7794880963991261,7308.33984375,1180)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3897" transform="matrix(0.057276135652844215,-0.9983583746754855,0.9983583746754855,0.057276135652844215,7184.616506459217,1479.4271798121015)" style="opacity: 1;"></path><path  d="M 7308 1180 L 7215 1255 C 7209.763727808095 1259.2149864878356 7207.097061141428 1264.548319821169 7207 1271 L 7195 1480" id="v-3896" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3889"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7204.955078125,1306.6151123046875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3892" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.55667114257812" height="60.23430061340332" transform="matrix(1,0,0,1,-86.8,-30.1)"></rect><text joint-selector="text" id="v-3891" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-3890"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7194.955078125,1348.6151123046875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3894" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3893" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7207.145591712143, 1261.3224797317534)" id="v-4550"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3899" display="none"><g  id="v-3887"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3888"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3898" display="none"><g  id="v-3886" transform="translate(7276.863478420987, 1205.1100980475912) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_262" ><path  stroke="#707070" d="M 5295 1720 L 5436 1776 C 5442 1778.6666666666665 5448 1781.333333333333 5454 1784 L 6345 2140" id="v-3913" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9284766955435519,0.371390664708372,-0.371390664708372,0.9284766955435519,5295,1720)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3915" transform="matrix(-0.928476707906966,-0.3713906337998342,0.3713906337998342,-0.928476707906966,6341.286192772322,2149.2848062295675)" style="opacity: 1;"></path><path  d="M 5295 1720 L 5436 1776 C 5442 1778.6666666666665 5448 1781.333333333333 5454 1784 L 6345 2140" id="v-3914" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3904"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5819.912109375,1930.2005615234375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3908" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="102.13516998291016" height="31.434292793273926" transform="matrix(1,0,0,1,-51.1,-15.7)"></rect><text joint-selector="text" id="v-3907" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >consume</tspan></text></g><g id="v-3905"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5819.912109375,1957.2005615234375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3910" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="294.9488220214844" height="19.631771087646484" transform="matrix(1,0,0,1,-147.5,-9.8)"></rect><text joint-selector="text" id="v-3909" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-7.8)"><tspan dy="0" >[Advanced Connect Protocol Adapter]</tspan></text></g><g id="v-3906"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,5809.912109375,1966.4505615234375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3912" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3911" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5445, 1780)" id="v-4551"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3917" display="none"><g  id="v-3902"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3903"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3916" display="none"><g  id="v-3900" transform="translate(5332.175322531106, 1734.7646671045527) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_263" ><path  stroke="#707070" d="M 4545 1120 L 5595 1540" id="v-3927" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9284766955435519,0.371390664708372,-0.371390664708372,0.9284766955435519,4545,1120)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3929" transform="matrix(-0.928476707906966,-0.3713906337998342,0.3713906337998342,-0.928476707906966,5591.286192772322,1549.2848062295675)" style="opacity: 1;"></path><path  d="M 4545 1120 L 5595 1540" id="v-3928" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3921"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5070,1330)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3924" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.94720458984375" height="31.434292793273926" transform="matrix(1,0,0,1,-45,-15.7)"></rect><text joint-selector="text" id="v-3923" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >monitor</tspan></text></g><g id="v-3922"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5060,1357)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3926" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3925" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3931" display="none"><g  id="v-3919"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3920"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3930" display="none"><g  id="v-3918" transform="translate(4582.13906763541, 1134.8556270541642) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_264" ><path  stroke="#707070" d="M 6922 669 L 6604 2080" id="v-3941" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.2200484024077445,0.9754889546262425,-0.9754889546262425,-0.2200484024077445,6922.1298828125,669)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3943" transform="matrix(0.2200485323019543,-0.9754889253250166,0.9754889253250166,0.2200485323019543,6594.08515276748,2077.799521117731)" style="opacity: 1;"></path><path  d="M 6922 669 L 6604 2080" id="v-3942" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3935"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6763,1374.5)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3938" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="93.11607360839844" height="31.434292793273926" transform="matrix(1,0,0,1,-46.6,-15.7)"></rect><text joint-selector="text" id="v-3937" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >discover</tspan></text></g><g id="v-3936"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6753,1401.5)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3940" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3939" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3945" display="none"><g  id="v-3933"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3934"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3944" display="none"><g  id="v-3932" transform="translate(6913.205693445407, 708.0212784545026) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_265" ><path  stroke="#707070" d="M 9616 488 L 7720 972" id="v-3958" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9688153640290939,0.24778375737964423,-0.24778375737964423,-0.9688153640290939,9616,487.5400085449219)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3960" transform="matrix(0.9688153640290939,-0.24778375737964434,0.24778375737964434,0.9688153640290939,7717.521997067162,962.7718616678809)" style="opacity: 1;"></path><path  d="M 9616 488 L 7720 972" id="v-3959" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3949"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8668,730)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3953" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="76.05292510986328" height="36.912025451660156" transform="matrix(1,0,0,1,-38,-18.5)"></rect><text joint-selector="text" id="v-3952" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-6.5)"><tspan dy="0" >Import</tspan></text></g><g id="v-3950"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8668,757)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3955" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="456.0737609863281" height="19.631771087646484" transform="matrix(1,0,0,1,-228,-9.8)"></rect><text joint-selector="text" id="v-3954" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-7.8)"><tspan dy="0" >[Periodic Import of Account / Group Information via LDAP]</tspan></text></g><g id="v-3951"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,8658,766.25)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3957" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3956" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3962" display="none"><g  id="v-3947"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3948"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3961" display="none"><g  id="v-3946" transform="translate(9577.242874612813, 497.8936965650833) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_266" ><path  stroke="#707070" d="M 4545 1660 L 7739 2079 C 7745.666666666666 2079.6666666666665 7752.333333333333 2080.333333333333 7759 2081 L 8957 2206" id="v-3976" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9914986243197174,0.13011717016638466,-0.13011717016638466,0.9914986243197174,4545,1659.530029296875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3978" transform="matrix(-0.9945659571095018,-0.10410839043449213,0.10410839043449213,-0.9945659571095018,8955.959263166751,2216.3956790223147)" style="opacity: 1;"></path><path  d="M 4545 1660 L 7739 2079 C 7745.666666666666 2079.6666666666665 7752.333333333333 2080.333333333333 7759 2081 L 8957 2206" id="v-3977" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3970"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6749.10009765625,1949.1414794921875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3973" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.349609375" height="65.73533630371094" transform="matrix(1,0,0,1,-76.2,-32.9)"></rect><text joint-selector="text" id="v-3972" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-20.9)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-3971"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6739.10009765625,1991.1414794921875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3975" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3974" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7749, 2080)" id="v-4552"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-3980" display="none"><g  id="v-3968"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3969"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3979" display="none"><g  id="v-3966" transform="translate(4584.660197485381, 1665.2027622875312) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_267" ><path  stroke="#707070" d="M 670 1091 L 2420 1569" id="v-3993" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.964762802330351,0.26312114175734347,-0.26312114175734347,0.964762802330351,670,1091.3599853515625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-3995" transform="matrix(-0.964762802330351,-0.26312114175734325,0.26312114175734325,-0.964762802330351,2417.3687115276052,1578.2876285033765)" style="opacity: 1;"></path><path  d="M 670 1091 L 2420 1569" id="v-3994" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-3987"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1545,1330)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3990" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.59186553955078" height="60.23430061340332" transform="matrix(1,0,0,1,-56.8,-30.1)"></rect><text joint-selector="text" id="v-3989" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-3988"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1535,1372)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-3992" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-3991" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-3997" display="none"><g  id="v-3985"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-3986"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-3996" display="none"><g  id="v-3984" transform="translate(708.586479301521, 1101.5396212035012) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_268" ><path  stroke="#707070" d="M 2442 1780 L 2044 2074 C 2038.6666666666665 2078 2036 2083.333333333333 2036 2090 L 2036 3074 C 2036 3080.6666666666665 2038.3333333333333 3086.333333333333 2043 3091 L 2256 3280" id="v-4009" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8042584072704063,0.5942797441734567,-0.5942797441734567,-0.8042584072704063,2442,1780)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4011" transform="matrix(-0.7463442338441797,-0.6655601284689043,0.6655601284689043,-0.7463442338441797,2249.1345012100032,3287.4635260450054)" style="opacity: 1;"></path><path  d="M 2442 1780 L 2044 2074 C 2038.6666666666665 2078 2036 2083.333333333333 2036 2090 L 2036 3074 C 2036 3080.6666666666665 2038.3333333333333 3086.333333333333 2043 3091 L 2256 3280" id="v-4010" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4003"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2036,2477.1201171875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4006" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="129.98390197753906" height="31.434292793273926" transform="matrix(1,0,0,1,-64.5,-15.7)"></rect><text joint-selector="text" id="v-4005" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-4004"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2026,2504.1201171875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4008" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4007" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2036, 2080)" id="v-4553"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(2036, 3084)" id="v-4554"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4013" display="none"><g  id="v-4001"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4002"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4012" display="none"><g  id="v-3998" transform="translate(2409.8262355466727, 1803.766549621302) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_269" ><path  stroke="#707070" d="M 4866 498 L 6110 877 C 6116.666666666666 879 6122.666666666666 882 6128 886 L 6973 1480" id="v-4027" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.956697711100469,0.29108330349768197,-0.29108330349768197,0.956697711100469,4866,498.4599914550781)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4029" transform="matrix(-0.8178599775837014,-0.5754172895097847,0.5754172895097847,-0.8178599775837014,6967.04600891199,1488.1786222803096)" style="opacity: 1;"></path><path  d="M 4866 498 L 6110 877 C 6116.666666666666 879 6122.666666666666 882 6128 886 L 6973 1480" id="v-4028" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4021"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5991.69873046875,840.9580688476562)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4024" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.02508544921875" height="60.23430061340332" transform="matrix(1,0,0,1,-82.5,-30.1)"></rect><text joint-selector="text" id="v-4023" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-4022"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5981.69873046875,882.9580688476562)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4026" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4025" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6120, 880)" id="v-4555"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4031" display="none"><g  id="v-4019"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4020"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4030" display="none"><g  id="v-4017" transform="translate(4904.2636010592305, 509.6574797439293) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_270" ><path  stroke="#707070" d="M 5595 1720 L 5454 1776 C 5448 1778.6666666666665 5441.666666666666 1780.333333333333 5435 1781 L 2971 2079 C 2964.333333333333 2079.6666666666665 2960 2083 2958 2089 L 2602 3075 C 2600 3081 2597.333333333333 3087 2594 3093 L 2500 3280" id="v-4044" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.928476707906966,0.37139063379983406,-0.37139063379983406,-0.928476707906966,5595,1720)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4046" transform="matrix(0.4513246641051292,-0.8923598195629341,0.8923598195629341,0.4513246641051292,2490.9464559445696,3275.486767570203)" style="opacity: 1;"></path><path  d="M 5595 1720 L 5454 1776 C 5448 1778.6666666666665 5441.666666666666 1780.333333333333 5435 1781 L 2971 2079 C 2964.333333333333 2079.6666666666665 2960 2083 2958 2089 L 2602 3075 C 2600 3081 2597.333333333333 3087 2594 3093 L 2500 3280" id="v-4045" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4038"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3645.38330078125,1997.4390869140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4041" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="129.98390197753906" height="31.434292793273926" transform="matrix(1,0,0,1,-64.5,-15.7)"></rect><text joint-selector="text" id="v-4040" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-4039"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3635.38330078125,2024.4390869140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4043" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4042" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5445, 1780)" id="v-4556"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(2961, 2080)" id="v-4557"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(2599, 3084)" id="v-4558"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4048" display="none"><g  id="v-4036"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4037"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4047" display="none"><g  id="v-4032" transform="translate(5557.824677468894, 1734.7646671045527) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_271" ><path  stroke="#707070" d="M 5199 2904 L 4659 3081 C 4652.333333333333 3083 4645.666666666666 3084.6666666666665 4639 3086 L 2649 3395" id="v-4059" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.950264277743843,0.31144470206438307,-0.31144470206438307,-0.950264277743843,5199,2903.739990234375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4061" transform="matrix(0.9881240471734326,-0.15365828125290193,0.15365828125290193,0.9881240471734326,2647.4635243719868,3385.12873101267)" style="opacity: 1;"></path><path  d="M 5199 2904 L 4659 3081 C 4652.333333333333 3083 4645.666666666666 3084.6666666666665 4639 3086 L 2649 3395" id="v-4060" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4053"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3934.958740234375,3195.321044921875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4056" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.83562469482422" height="31.434292793273926" transform="matrix(1,0,0,1,-56.9,-15.7)"></rect><text joint-selector="text" id="v-4055" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >mount etc</tspan></text></g><g id="v-4054"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3924.958740234375,3222.321044921875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4058" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4057" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(4649, 3084)" id="v-4559"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4063" display="none"><g  id="v-4051"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4052"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4062" display="none"><g  id="v-4049" transform="translate(5160.989793651863, 2916.4589009696674) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_272" ><path  stroke="#707070" d="M 4499 2776 L 4889 2682 C 4895.666666666666 2680.6666666666665 4902.333333333333 2679.6666666666665 4909 2679 L 8664 2485 C 8670.666666666666 2484.333333333333 8677 2482.6666666666665 8683 2480 L 8957 2343" id="v-4078" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9723873253673181,-0.23337285503029992,0.23337285503029992,0.9723873253673181,4499,2776)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4080" transform="matrix(-0.8944272140983216,0.44721354930314355,-0.44721354930314355,-0.8944272140983216,8961.472071696515,2351.444304616701)" style="opacity: 1;"></path><path  d="M 4499 2776 L 4889 2682 C 4895.666666666666 2680.6666666666665 4902.333333333333 2679.6666666666665 4909 2679 L 8664 2485 C 8670.666666666666 2484.333333333333 8677 2482.6666666666665 8683 2480 L 8957 2343" id="v-4079" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4072"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6738.8974609375,2584.45947265625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4075" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.349609375" height="65.73533630371094" transform="matrix(1,0,0,1,-76.2,-32.9)"></rect><text joint-selector="text" id="v-4074" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-20.9)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-4073"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6728.8974609375,2626.45947265625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4077" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4076" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(4899, 2680)" id="v-4560"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(8674, 2484)" id="v-4561"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4082" display="none"><g  id="v-4070"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4071"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4081" display="none"><g  id="v-4067" transform="translate(4537.886423076529, 2766.627374950785) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_273" ><path  stroke="#707070" d="M 8957 2195 L 6326 1782 C 6319.333333333332 1780.6666666666665 6312.666666666666 1778.9999999999998 6306 1777 L 6045 1698" id="v-4096" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9878968853495584,-0.15511203665944634,0.15511203665944634,-0.9878968853495584,8957,2194.669921875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4098" transform="matrix(0.9571822936917621,0.2894858487784459,-0.2894858487784459,0.9571822936917621,6047.894812894617,1688.4681330284234)" style="opacity: 1;"></path><path  d="M 8957 2195 L 6326 1782 C 6319.333333333332 1780.6666666666665 6312.666666666666 1778.9999999999998 6306 1777 L 6045 1698" id="v-4097" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4090"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7496.61572265625,1965.7568359375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4093" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.55667114257812" height="60.23430061340332" transform="matrix(1,0,0,1,-86.8,-30.1)"></rect><text joint-selector="text" id="v-4092" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-4091"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7486.61572265625,2007.7568359375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4095" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4094" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6316, 1780)" id="v-4562"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4100" display="none"><g  id="v-4088"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4089"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4099" display="none"><g  id="v-4086" transform="translate(8917.48389547643, 2188.796977891207) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_274" ><path  stroke="#707070" d="M 4416 565 L 2870 1495" id="v-4113" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8570376545835999,0.5152537807972322,-0.5152537807972322,-0.8570376545835999,4416,565.27001953125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4115" transform="matrix(0.8570377918039518,-0.51525355255428,0.51525355255428,0.8570377918039518,2864.847399056418,1486.1596722559411)" style="opacity: 1;"></path><path  d="M 4416 565 L 2870 1495" id="v-4114" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4107"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3643,1030)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4110" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.02508544921875" height="60.23430061340332" transform="matrix(1,0,0,1,-82.5,-30.1)"></rect><text joint-selector="text" id="v-4109" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-4108"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3633,1072)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4112" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4111" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-4117" display="none"><g  id="v-4105"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4106"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4116" display="none"><g  id="v-4104" transform="translate(4381.723780362433, 585.6189419553286) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_275" ><path  stroke="#707070" d="M 6961 1770 L 6953 1775 C 6947.666666666666 1778.333333333333 6941.666666666666 1780.6666666666665 6935 1782 L 3071 2678 C 3064.333333333333 2679.333333333333 3060.6666666666665 2683.333333333333 3060 2690 L 3021 3074 C 3020.333333333333 3080.6666666666665 3017 3085.6666666666665 3011 3089 L 2649 3299" id="v-4130" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8489507742424643,0.5284719320012373,-0.5284719320012373,-0.8489507742424643,6961,1770.0400390625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4132" transform="matrix(0.8648287735463488,-0.502066920286846,0.502066920286846,0.8648287735463488,2643.9792364210434,3290.7317564674054)" style="opacity: 1;"></path><path  d="M 6961 1770 L 6953 1775 C 6947.666666666666 1778.333333333333 6941.666666666666 1780.6666666666665 6935 1782 L 3071 2678 C 3064.333333333333 2679.333333333333 3060.6666666666665 2683.333333333333 3060 2690 L 3021 3074 C 3020.333333333333 3080.6666666666665 3017 3085.6666666666665 3011 3089 L 2649 3299" id="v-4131" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4124"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,4607.44677734375,2321.722412109375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4127" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="129.98390197753906" height="31.434292793273926" transform="matrix(1,0,0,1,-64.5,-15.7)"></rect><text joint-selector="text" id="v-4126" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-4125"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,4597.44677734375,2348.722412109375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4129" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4128" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6945, 1780)" id="v-4563"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(3061, 2680)" id="v-4564"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(3020, 3084)" id="v-4565"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4134" display="none"><g  id="v-4122"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4123"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4133" display="none"><g  id="v-4118" transform="translate(6924.140235996143, 1784.518206145822) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_276" ><path  stroke="#707070" d="M 9059 2380 L 8980 2476 C 8976 2481.333333333333 8970.666666666666 2484.333333333333 8964 2485 L 5209 2679 C 5202.333333333333 2679.6666666666665 5195.666666666666 2680.6666666666665 5189 2682 L 4499 2794" id="v-4149" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.633590068098534,0.773668937987622,-0.773668937987622,-0.633590068098534,9059.169921875,2380)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4151" transform="matrix(0.9871062380502388,-0.16006646995015927,0.16006646995015927,0.9871062380502388,4497.399366669996,2783.6390261471247)" style="opacity: 1;"></path><path  d="M 9059 2380 L 8980 2476 C 8976 2481.333333333333 8970.666666666666 2484.333333333333 8964 2485 L 5209 2679 C 5202.333333333333 2679.6666666666665 5195.666666666666 2680.6666666666665 5189 2682 L 4499 2794" id="v-4150" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4143"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6798.88037109375,2596.859619140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4146" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.55667114257812" height="60.23430061340332" transform="matrix(1,0,0,1,-86.8,-30.1)"></rect><text joint-selector="text" id="v-4145" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-4144"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6788.88037109375,2638.859619140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4148" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4147" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(8974, 2484)" id="v-4566"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(5199, 2680)" id="v-4567"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4153" display="none"><g  id="v-4141"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4142"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4152" display="none"><g  id="v-4138" transform="translate(9033.582988866912, 2410.886494541474) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_277" ><path  stroke="#707070" d="M 6008 1780 L 6383 2080" id="v-4166" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.7808688000832672,0.624695059254128,-0.624695059254128,0.7808688000832672,6007.5,1780)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4168" transform="matrix(-0.7808688416748548,-0.6246950072646416,0.6246950072646416,-0.7808688416748548,6376.253144594102,2087.808568176895)" style="opacity: 1;"></path><path  d="M 6008 1780 L 6383 2080" id="v-4167" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4157"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6195.5,1930)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4161" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="102.13516998291016" height="31.434292793273926" transform="matrix(1,0,0,1,-51.1,-15.7)"></rect><text joint-selector="text" id="v-4160" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >consume</tspan></text></g><g id="v-4158"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6195.5,1957)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4163" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="294.9488220214844" height="19.631771087646484" transform="matrix(1,0,0,1,-147.5,-9.8)"></rect><text joint-selector="text" id="v-4162" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-7.8)"><tspan dy="0" >[Advanced Connect Protocol Adapter]</tspan></text></g><g id="v-4159"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,6185.5,1966.25)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4165" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4164" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-4170" display="none"><g  id="v-4155"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4156"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4169" display="none"><g  id="v-4154" transform="translate(6039.234752377722, 1804.987801902177) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_278" ><path  stroke="#707070" d="M 8957 2200 L 8059 2081 C 8052.333333333333 2080.333333333333 8045.666666666666 2079.6666666666665 8039 2079 L 4855 1781 C 4848.333333333333 1780.333333333333 4841.666666666666 1778.9999999999998 4835 1777 L 4545 1694" id="v-4185" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9913500157718974,-0.13124460457123077,0.13124460457123077,-0.9913500157718974,8957,2200.2099609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4187" transform="matrix(0.9615275757491837,0.27470842920066685,-0.27470842920066685,0.9615275757491837,4547.747042909515,1684.674749325502)" style="opacity: 1;"></path><path  d="M 8957 2200 L 8059 2081 C 8052.333333333333 2080.333333333333 8045.666666666666 2079.6666666666665 8039 2079 L 4855 1781 C 4848.333333333333 1780.333333333333 4841.666666666666 1778.9999999999998 4835 1777 L 4545 1694" id="v-4186" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4179"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6747.62646484375,1958.136474609375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4182" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.55667114257812" height="60.23430061340332" transform="matrix(1,0,0,1,-86.8,-30.1)"></rect><text joint-selector="text" id="v-4181" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-4180"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6737.62646484375,2000.136474609375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4184" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4183" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(8049, 2080)" id="v-4568"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(4845, 1780)" id="v-4569"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4189" display="none"><g  id="v-4177"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4178"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4188" display="none"><g  id="v-4174" transform="translate(8917.346654542613, 2194.745269365892) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_279" ><path  stroke="#707070" d="M 2870 1662 L 3701 1779 C 3707.6666666666665 1779.6666666666665 3714.333333333333 1780.6666666666665 3721 1782 L 6345 2195" id="v-4203" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9902444980434117,0.13934071226584,-0.13934071226584,0.9902444980434117,2870,1661.6600341796875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4205" transform="matrix(-0.9878382389826911,-0.15548509125821608,0.15548509125821608,-0.9878382389826911,6343.445113508495,2204.4683895524086)" style="opacity: 1;"></path><path  d="M 2870 1662 L 3701 1779 C 3707.6666666666665 1779.6666666666665 3714.333333333333 1780.6666666666665 3721 1782 L 6345 2195" id="v-4204" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4194"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,4608.51220703125,1921.6884765625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4198" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="102.13516998291016" height="31.434292793273926" transform="matrix(1,0,0,1,-51.1,-15.7)"></rect><text joint-selector="text" id="v-4197" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >consume</tspan></text></g><g id="v-4195"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,4608.51220703125,1948.6884765625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4200" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="284.4671630859375" height="19.631771087646484" transform="matrix(1,0,0,1,-142.2,-9.8)"></rect><text joint-selector="text" id="v-4199" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-7.8)"><tspan dy="0" >[Advaced Connect Protocol Adapter]</tspan></text></g><g id="v-4196"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,4598.51220703125,1957.9384765625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4202" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4201" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(3711, 1780)" id="v-4570"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4207" display="none"><g  id="v-4192"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4193"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4206" display="none"><g  id="v-4190" transform="translate(2909.6093382993354, 1667.5767660421448) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_280" ><path  stroke="#707070" d="M 7270 1169 L 7261 1175 C 7255.666666666666 1178.3333333333333 7249.666666666666 1180.3333333333333 7243 1181 L 1634 1479 C 1627.333333333333 1479.6666666666665 1623.9999999999998 1483.3333333333333 1624 1490 L 1624 3074 C 1623.9999999999998 3080.6666666666665 1626.9999999999998 3085.333333333333 1633 3088 L 2199 3333" id="v-4220" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8499026286824363,0.5269397705228606,-0.5269397705228606,-0.8499026286824363,7270,1169.4599609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4222" transform="matrix(-0.9178330233595616,-0.396966675214238,0.396966675214238,-0.9178330233595616,2195.0304408252036,3341.868211829488)" style="opacity: 1;"></path><path  d="M 7270 1169 L 7261 1175 C 7255.666666666666 1178.3333333333333 7249.666666666666 1180.3333333333333 7243 1181 L 1634 1479 C 1627.333333333333 1479.6666666666665 1623.9999999999998 1483.3333333333333 1624 1490 L 1624 3074 C 1623.9999999999998 3080.6666666666665 1626.9999999999998 3085.333333333333 1633 3088 L 2199 3333" id="v-4221" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4214"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3337.435302734375,1388.4984130859375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4217" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="129.98390197753906" height="31.434292793273926" transform="matrix(1,0,0,1,-64.5,-15.7)"></rect><text joint-selector="text" id="v-4216" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-4215"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3327.435302734375,1415.4984130859375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4219" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4218" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7253, 1180)" id="v-4571"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(1624, 1480)" id="v-4572"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(1624, 3084)" id="v-4573"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4224" display="none"><g  id="v-4212"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4213"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4223" display="none"><g  id="v-4208" transform="translate(7232.972733506536, 1181.5327376386258) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_281" ><path  stroke="#707070" d="M 6795 2144 L 6952 2084 C 6957.999999999999 2081.333333333333 6963.999999999999 2078.6666666666665 6970 2076 L 7702 1784 C 7707.999999999999 1781.333333333333 7710.999999999999 1776.6666666666665 7711 1770 L 7711 1490 C 7710.999999999999 1483.3333333333333 7709.666666666666 1477 7707 1471 L 7567 1180" id="v-4240" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9336582828051169,-0.3581650610394604,0.3581650610394604,0.9336582828051169,6795,2143.679931640625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4242" transform="matrix(0.4327310777401818,0.9015230525936765,-0.9015230525936765,0.4327310777401818,7576.015068186034,1175.6727174857242)" style="opacity: 1;"></path><path  d="M 6795 2144 L 6952 2084 C 6957.999999999999 2081.333333333333 6963.999999999999 2078.6666666666665 6970 2076 L 7702 1784 C 7707.999999999999 1781.333333333333 7710.999999999999 1776.6666666666665 7711 1770 L 7711 1490 C 7710.999999999999 1483.3333333333333 7709.666666666666 1477 7707 1471 L 7567 1180" id="v-4241" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4234"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7546.1279296875,1846.1785888671875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4237" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.55667114257812" height="60.23430061340332" transform="matrix(1,0,0,1,-86.8,-30.1)"></rect><text joint-selector="text" id="v-4236" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-4235"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7536.1279296875,1888.1785888671875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4239" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4238" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6961, 2080)" id="v-4574"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(7711, 1780)" id="v-4575"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(7711, 1480)" id="v-4576"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4244" display="none"><g  id="v-4232"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4233"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4243" display="none"><g  id="v-4228" transform="translate(6832.364407889794, 2129.72060844976) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_282" ><path  stroke="#707070" d="M 577 1180 L 1096 1772 C 1100.6666666666665 1777.333333333333 1106 1780.9999999999998 1112 1783 L 4049 2756" id="v-4258" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.6594974236264884,0.7517068233227793,-0.7517068233227793,0.6594974236264884,576.5999755859375,1180)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4260" transform="matrix(-0.9493097483164306,-0.3143421730398185,0.3143421730398185,-0.9493097483164306,4045.8565116902664,2764.993208666687)" style="opacity: 1;"></path><path  d="M 577 1180 L 1096 1772 C 1100.6666666666665 1777.333333333333 1106 1780.9999999999998 1112 1783 L 4049 2756" id="v-4259" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4252"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2197.501953125,2142.616455078125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4255" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.59186553955078" height="60.23430061340332" transform="matrix(1,0,0,1,-56.8,-30.1)"></rect><text joint-selector="text" id="v-4254" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-4253"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2187.501953125,2184.616455078125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4257" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4256" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1103, 1780)" id="v-4577"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4262" display="none"><g  id="v-4250"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4251"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4261" display="none"><g  id="v-4248" transform="translate(603.3689480519973, 1210.0778752346482) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_283" ><path  stroke="#707070" d="M 4545 1077 L 6961 1583" id="v-4272" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9787804214837076,0.2049118994108826,-0.2049118994108826,0.9787804214837076,4545,1077.0999755859375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4274" transform="matrix(-0.9787804248944163,-0.2049118831193203,0.2049118831193203,-0.9787804248944163,6958.951087761501,1592.687753158262)" style="opacity: 1;"></path><path  d="M 4545 1077 L 6961 1583" id="v-4273" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4266"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5753,1330)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4269" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.94720458984375" height="31.434292793273926" transform="matrix(1,0,0,1,-45,-15.7)"></rect><text joint-selector="text" id="v-4268" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >monitor</tspan></text></g><g id="v-4267"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5743,1357)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4271" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4270" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-4276" display="none"><g  id="v-4264"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4265"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4275" display="none"><g  id="v-4263" transform="translate(4584.15056676011, 1085.1995806211157) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_284" ><path  stroke="#707070" d="M 6961 1735 L 6782 1818 C 6776.225765292789 1821.0317857005966 6771.892431959455 1825.36511903393 6769 1831 L 6645 2080" id="v-4289" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9061972318947702,0.4228552670905921,-0.4228552670905921,-0.9061972318947702,6961,1734.97998046875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4291" transform="matrix(0.4465252561208365,-0.894771029731194,0.894771029731194,0.4465252561208365,6635.91223245398,2075.5347038298537)" style="opacity: 1;"></path><path  d="M 6961 1735 L 6782 1818 C 6776.225765292789 1821.0317857005966 6771.892431959455 1825.36511903393 6769 1831 L 6645 2080" id="v-4290" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4283"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6755.1416015625,1858.8291015625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4286" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.55667114257812" height="60.23430061340332" transform="matrix(1,0,0,1,-86.8,-30.1)"></rect><text joint-selector="text" id="v-4285" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-4284"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6745.1416015625,1900.8291015625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4288" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4287" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6773.338647939184, 1822.547678550895)" id="v-4578"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4293" display="none"><g  id="v-4281"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4282"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4292" display="none"><g  id="v-4280" transform="translate(6924.711349294183, 1751.8265810535354) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_285" ><path  stroke="#707070" d="M 670 1059 L 1614 1179 C 1620.6666666666665 1179.6666666666665 1627.333333333333 1180.3333333333333 1634 1181 L 4685 1479 C 4691.666666666666 1479.6666666666665 4698 1481.3333333333333 4704 1484 L 4845 1540" id="v-4308" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9920041850608888,0.12620497938545017,-0.12620497938545017,0.9920041850608888,670,1058.6300048828125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4310" transform="matrix(-0.928476707906966,-0.3713906337998342,0.3713906337998342,-0.928476707906966,4841.286192772322,1549.2848062295675)" style="opacity: 1;"></path><path  d="M 670 1059 L 1614 1179 C 1620.6666666666665 1179.6666666666665 1627.333333333333 1180.3333333333333 1634 1181 L 4685 1479 C 4691.666666666666 1479.6666666666665 4698 1481.3333333333333 4704 1484 L 4845 1540" id="v-4309" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4302"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2761.2666015625,1291.1033935546875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4305" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.59186553955078" height="60.23430061340332" transform="matrix(1,0,0,1,-56.8,-30.1)"></rect><text joint-selector="text" id="v-4304" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-4303"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2751.2666015625,1333.1033935546875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4307" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4306" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1624, 1180)" id="v-4579"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(4695, 1480)" id="v-4580"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4312" display="none"><g  id="v-4300"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4301"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4311" display="none"><g  id="v-4297" transform="translate(709.6806817703542, 1064.0441544623332) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_286" ><path  stroke="#707070" d="M 670 1059 L 1614 1179 C 1620.6666666666665 1179.6666666666665 1627.333333333333 1180.3333333333333 1634 1181 L 6961 1612" id="v-4326" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9920041850608888,0.12620497938545017,-0.12620497938545017,0.9920041850608888,670,1058.6300048828125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4328" transform="matrix(-0.9967430170757892,-0.08064339967196944,0.08064339967196944,-0.9967430170757892,6960.193711017788,1621.7673944409146)" style="opacity: 1;"></path><path  d="M 670 1059 L 1614 1179 C 1620.6666666666665 1179.6666666666665 1627.333333333333 1180.3333333333333 1634 1181 L 6961 1612" id="v-4327" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4320"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3813.234375,1357.3187255859375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4323" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.59186553955078" height="60.23430061340332" transform="matrix(1,0,0,1,-56.8,-30.1)"></rect><text joint-selector="text" id="v-4322" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-4321"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3803.234375,1399.3187255859375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4325" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4324" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1624, 1180)" id="v-4581"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4330" display="none"><g  id="v-4318"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4319"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4329" display="none"><g  id="v-4316" transform="translate(709.6806817703542, 1064.0441544623332) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_287" ><path  stroke="#707070" d="M 4195 1180 L 3951 1472 C 3947 1477.3333333333333 3945 1483.3333333333333 3945 1490 L 3945 1770 C 3945 1776.6666666666665 3948.333333333333 1780.6666666666665 3955 1782 L 6345 2191" id="v-4342" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.6401844186703123,0.7682212637591818,-0.7682212637591818,-0.6401844186703123,4195,1180)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4344" transform="matrix(-0.9856221462759136,-0.16896444824418422,0.16896444824418422,-0.9856221462759136,6343.310131667818,2201.2861003202006)" style="opacity: 1;"></path><path  d="M 4195 1180 L 3951 1472 C 3947 1477.3333333333333 3945 1483.3333333333333 3945 1490 L 3945 1770 C 3945 1776.6666666666665 3948.333333333333 1780.6666666666665 3955 1782 L 6345 2191" id="v-4343" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4336"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,4806.4638671875,1927.710693359375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4339" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.94720458984375" height="31.434292793273926" transform="matrix(1,0,0,1,-45,-15.7)"></rect><text joint-selector="text" id="v-4338" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >monitor</tspan></text></g><g id="v-4337"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,4796.4638671875,1954.710693359375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4341" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4340" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(3945, 1480)" id="v-4582"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(3945, 1780)" id="v-4583"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4346" display="none"><g  id="v-4334"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4335"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4345" display="none"><g  id="v-4331" transform="translate(4169.351289436091, 1210.6943585436939) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_288" ><path  stroke="#707070" d="M 9758 1780 L 9617 2032 C 9613.989775638702 2037.9432146876193 9609.323108972036 2042.2765480209528 9603 2045 L 9407 2131" id="v-4359" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.4860080310250374,0.8739543430747205,-0.8739543430747205,-0.4860080310250374,9757.580078125,1780)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4361" transform="matrix(0.915574494593016,-0.40214841147360436,0.40214841147360436,0.915574494593016,9402.978044376834,2122.014176668806)" style="opacity: 1;"></path><path  d="M 9758 1780 L 9617 2032 C 9613.989775638702 2037.9432146876193 9609.323108972036 2042.2765480209528 9603 2045 L 9407 2131" id="v-4360" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4350"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,9630.4814453125,2007.9058837890625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4354" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="148.9369659423828" height="31.434292793273926" transform="matrix(1,0,0,1,-74.5,-15.7)"></rect><text joint-selector="text" id="v-4353" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >consume ILM</tspan></text></g><g id="v-4351"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,9630.4814453125,2034.9058837890625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4356" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="388.55242919921875" height="19.65645408630371" transform="matrix(1,0,0,1,-194.3,-9.8)"></rect><text joint-selector="text" id="v-4355" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-7.8)"><tspan dy="0" >[SAP Information Lifecycle Management Protocol]</tspan></text></g><g id="v-4352"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,9620.4814453125,2044.1558837890625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4358" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4357" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(9612.484663458054, 2040.9148220314291)" id="v-4584"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4363" display="none"><g  id="v-4348"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4349"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4362" display="none"><g  id="v-4347" transform="translate(9738.468520711005, 1814.9073246867129) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_289" ><path  stroke="#707070" d="M 2870 1759 L 3419 2075 C 3424.9999999999995 2078.333333333333 3430.333333333333 2082.333333333333 3435 2087 L 4105 2680" id="v-4377" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8670137189993192,0.49828426732836906,-0.49828426732836906,0.8670137189993192,2870,1759.31005859375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4379" transform="matrix(-0.7482870617714884,-0.6633750622275401,0.6633750622275401,-0.7482870617714884,4098.16601452669,2687.48283217749)" style="opacity: 1;"></path><path  d="M 2870 1759 L 3419 2075 C 3424.9999999999995 2078.333333333333 3430.333333333333 2082.333333333333 3435 2087 L 4105 2680" id="v-4378" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4371"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3525.317626953125,2166.937744140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4374" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="189.40103149414062" height="31.434292793273926" transform="matrix(1,0,0,1,-94.7,-15.7)"></rect><text joint-selector="text" id="v-4373" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >create renditions</tspan></text></g><g id="v-4372"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3515.317626953125,2193.937744140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4376" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4375" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(3428, 2080)" id="v-4585"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4381" display="none"><g  id="v-4369"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4370"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4380" display="none"><g  id="v-4367" transform="translate(2904.6673803140966, 1778.9542662645804) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_290" ><path  stroke="#707070" d="M 4864 580 L 5303 874 C 5308.333333333333 878 5313.666666666666 882 5319 886 L 6187 1474 C 6192.333333333333 1478 6196.333333333333 1483 6199 1489 L 6495 2080" id="v-4396" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8301411406363217,0.5575533038401144,-0.5575533038401144,0.8301411406363217,4864.330078125,580)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4398" transform="matrix(-0.4472135493031436,-0.8944272140983216,0.8944272140983216,-0.4472135493031436,6486.055695383298,2084.4720716965144)" style="opacity: 1;"></path><path  d="M 4864 580 L 5303 874 C 5308.333333333333 878 5313.666666666666 882 5319 886 L 6187 1474 C 6192.333333333333 1478 6196.333333333333 1483 6199 1489 L 6495 2080" id="v-4397" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4390"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5807.6630859375,1217.02978515625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4393" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.02508544921875" height="60.23430061340332" transform="matrix(1,0,0,1,-82.5,-30.1)"></rect><text joint-selector="text" id="v-4392" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-4391"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5797.6630859375,1259.02978515625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4395" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4394" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5311, 880)" id="v-4586"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(6195, 1480)" id="v-4587"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4400" display="none"><g  id="v-4388"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4389"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4399" display="none"><g  id="v-4385" transform="translate(4897.235349515107, 602.2578422720766) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_291" ><path  stroke="#707070" d="M 6570 2380 L 6570 2680" id="v-4413" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(6.123233995736766e-17,1,-1,6.123233995736766e-17,6570,2380)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4415" transform="matrix(-1.8369701987210297e-16,-1,1,-1.8369701987210297e-16,6560.000000000001,2680)" style="opacity: 1;"></path><path  d="M 6570 2380 L 6570 2680" id="v-4414" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4407"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6570,2530)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4410" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="170.63156127929688" height="31.434292793273926" transform="matrix(1,0,0,1,-85.3,-15.7)"></rect><text joint-selector="text" id="v-4409" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >store metadata</tspan></text></g><g id="v-4408"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6560,2557)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4412" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4411" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-4417" display="none"><g  id="v-4405"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4406"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4416" display="none"><g  id="v-4404" transform="translate(6570, 2420) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_292" ><path  stroke="#707070" d="M 4845 1720 L 4704 1776 C 4698 1778.6666666666665 4691.666666666666 1780.333333333333 4685 1781 L 2663 2079 C 2656.333333333333 2079.6666666666665 2652.333333333333 2083.333333333333 2651 2090 L 2449 3280" id="v-4429" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.928476707906966,0.37139063379983406,-0.37139063379983406,-0.928476707906966,4845,1720)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4431" transform="matrix(0.16724411414583812,-0.9859155168083997,0.9859155168083997,0.16724411414583812,2439.580952518583,3278.327583167251)" style="opacity: 1;"></path><path  d="M 4845 1720 L 4704 1776 C 4698 1778.6666666666665 4691.666666666666 1780.333333333333 4685 1781 L 2663 2079 C 2656.333333333333 2079.6666666666665 2652.333333333333 2083.333333333333 2651 2090 L 2449 3280" id="v-4430" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4423"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3153.00830078125,2006.783203125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4426" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="129.98390197753906" height="31.434292793273926" transform="matrix(1,0,0,1,-64.5,-15.7)"></rect><text joint-selector="text" id="v-4425" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-4424"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3143.00830078125,2033.783203125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4428" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4427" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(4695, 1780)" id="v-4588"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(2653, 2080)" id="v-4589"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4433" display="none"><g  id="v-4421"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4422"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4432" display="none"><g  id="v-4418" transform="translate(4807.824677468894, 1734.7646671045527) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_293" ><path  stroke="#707070" d="M 4866 477 L 7270 983" id="v-4446" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9786076226250515,0.2057355607087522,-0.2057355607087522,0.9786076226250515,4866,477.29998779296875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4448" transform="matrix(-0.9786076328983054,-0.20573551184269426,0.20573551184269426,-0.9786076328983054,7267.942588398057,992.4860706075658)" style="opacity: 1;"></path><path  d="M 4866 477 L 7270 983" id="v-4447" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4440"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6068,730)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4443" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.02508544921875" height="60.23430061340332" transform="matrix(1,0,0,1,-82.5,-30.1)"></rect><text joint-selector="text" id="v-4442" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-18.1)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-4441"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6058,772)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4445" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4444" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-4450" display="none"><g  id="v-4438"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4439"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4449" display="none"><g  id="v-4437" transform="translate(4905.142336875305, 485.2387780611082) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_294" ><path  stroke="#707070" d="M 6427 2380 L 6335 2477 C 6330.333333333332 2481.6666666666665 6324.666666666666 2484.6666666666665 6318 2486 L 5059 2678 C 5052.333333333333 2679.333333333333 5045.666666666666 2680.6666666666665 5039 2682 L 4499 2786" id="v-4465" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.68980994850411,0.723990493683969,-0.723990493683969,-0.68980994850411,6427.08984375,2380)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4467" transform="matrix(0.9817804299927354,-0.19001891296205115,0.19001891296205115,0.9817804299927354,4497.099877664202,2776.6321895171936)" style="opacity: 1;"></path><path  d="M 6427 2380 L 6335 2477 C 6330.333333333332 2481.6666666666665 6324.666666666666 2484.6666666666665 6318 2486 L 5059 2678 C 5052.333333333333 2679.333333333333 5045.666666666666 2680.6666666666665 5039 2682 L 4499 2786" id="v-4466" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4459"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5482.3291015625,2613.44140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4462" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="189.40103149414062" height="31.434292793273926" transform="matrix(1,0,0,1,-94.7,-15.7)"></rect><text joint-selector="text" id="v-4461" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-3.7)"><tspan dy="0" >create renditions</tspan></text></g><g id="v-4460"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5472.3291015625,2640.44140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4464" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4463" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6328, 2484)" id="v-4590"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(5049, 2680)" id="v-4591"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4469" display="none"><g  id="v-4457"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4458"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4468" display="none"><g  id="v-4454" transform="translate(6399.473620633766, 2409.0223782448334) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g></g><g ></g><g ></g><g ></g></g></svg>
\ No newline at end of file
diff --git a/dsl/export/sc_sap-key.svg b/dsl/export/sc_sap-key.svg
new file mode 100644
index 0000000..2fbdb08
--- /dev/null
+++ b/dsl/export/sc_sap-key.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 2500 500" style="background: #ffffff"><g transform="translate(25,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#dddddd" stroke-width="2" stroke="#c7c7c7"/><text x="225" y="131.25" text-anchor="middle" fill="#000000" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Element</tspan></text></g><g transform="translate(525,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#dddddd" stroke-width="2" stroke="#3d6fdd"/><text x="225" y="96.25" text-anchor="middle" fill="#3d6fdd" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Kubernetes - ds</tspan></text><image xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/ds-256.png" x="195" y="153.75" width="60" height="60" opacity="1"/></g><g transform="translate(1025,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#11a63c" stroke-width="2" stroke="#0f9536"/><text x="225" y="131.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">nscale</tspan></text></g><g transform="translate(1525,170)"><path d="M390,0 L390,60 L450,30 L 390,0" style="fill:#707070" stroke-dasharray="" /><path d="M0,30 L390,30" style="stroke:#707070; stroke-width: 6; fill: none; stroke-dasharray: 30 30;" /><text x="225" y="76.25" text-anchor="middle" fill="#707070" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Relationship</tspan></text></g></svg>
\ No newline at end of file
diff --git a/dsl/export/sc_sap.svg b/dsl/export/sc_sap.svg
new file mode 100644
index 0000000..f884c6a
--- /dev/null
+++ b/dsl/export/sc_sap.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 1239 2242" style="background: #ffffff"><defs joint-selector="defs"></defs><g joint-selector="layers"  transform="matrix(1,0,0,1,0,0)"><g ></g><g ><g   id="j_337"  transform="translate(20,2197)"><g id="v-5046"><text  id="v-5047" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >Tuesday, December 19, 2023 at 8:42 AM Central European Standard Time</tspan></text></g></g><g   id="j_336"  transform="translate(20,2166)"><g id="v-5044"><text  id="v-5045" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >focus on SAP</tspan></text></g></g><g   id="j_335"  transform="translate(20,2122)"><g id="v-5042"><text  id="v-5043" font-size="36px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#000000" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >[System Context] SAP</tspan></text></g></g><g   id="j_324"  transform="translate(326,779)" style=""><g id="v-4915"><rect  id="v-4916" width="704" height="1262" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-4917" font-size="24px" xml:space="preserve" y="1247" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Kubernetes Cluster</tspan></text><text  id="v-4918" font-size="17px" xml:space="preserve" display="none" y="1247" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-4919" pointer-events="visible"></image></g></g><g   id="j_323"  transform="translate(560,799)" style=""><g  id="v-4908" style="opacity: 1;"><rect  id="v-4909" rx="1" ry="1" stroke="#3d6fdd" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(61, 111, 221);"></rect><text  id="v-4910" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,39.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >Kubernetes Ingress</tspan><tspan dy="1.2em" x="0" >Controller</tspan></text><text  id="v-4911" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,124.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-4912" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >Layer 7 Load Balancer</tspan></text><g  id="v-4913" color="#3d6fdd" transform="matrix(1,0,0,1,222.5,270.6)" display="none" style="fill: rgb(61, 111, 221);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-4914" xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/ds-256.png" width="60" height="60" opacity="1" transform="matrix(1,0,0,1,195,195.6)"></image></g></g><g   id="j_327"  transform="translate(346,1385)" style=""><g id="v-4940"><rect  id="v-4941" width="570" height="582" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-4942" font-size="24px" xml:space="preserve" y="567" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Namespace</tspan></text><text  id="v-4943" font-size="17px" xml:space="preserve" display="none" y="567" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-4944" pointer-events="visible"></image></g></g><g   id="j_328"  transform="translate(366,1405)" style=""><g id="v-4945"><rect  id="v-4946" width="530" height="488" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-4947" font-size="24px" xml:space="preserve" y="473" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Instance</tspan></text><text  id="v-4948" font-size="17px" xml:space="preserve" display="none" y="473" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-4949" pointer-events="visible"></image></g></g><g   id="j_329"  transform="translate(386,1425)" style=""><g id="v-4950"><rect  id="v-4951" width="490" height="394" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-4952" font-size="24px" xml:space="preserve" y="379" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >nscale Application Layer Cluster</tspan></text><text  id="v-4953" font-size="17px" xml:space="preserve" display="none" y="379" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-4954" pointer-events="visible"></image></g></g><g   id="j_326"  transform="translate(406,1445)" style=""><g  id="v-4933" style="opacity: 1;"><rect  id="v-4934" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-4935" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,83.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Application Layer</tspan></text><text  id="v-4936" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,125.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-4937" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,156.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Provides DMS and BPM</tspan><tspan dy="1.2em" x="0" >Functionality</tspan></text><g  id="v-4938" color="#ffffff" transform="matrix(1,0,0,1,210,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g  transform="translate(5 0)"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" viewBox="0 0 16 16"><path fill-rule="evenodd" d="M6.5 12a5.5 5.5 0 1 0 0-11 5.5 5.5 0 0 0 0 11zM13 6.5a6.5 6.5 0 1 1-13 0 6.5 6.5 0 0 1 13 0z"></path><path d="M10.344 11.742c.03.04.062.078.098.115l3.85 3.85a1 1 0 0 0 1.415-1.414l-3.85-3.85a1.007 1.007 0 0 0-.115-.1 6.538 6.538 0 0 1-1.398 1.4z"></path><path fill-rule="evenodd" d="M6.5 3a.5.5 0 0 1 .5.5V6h2.5a.5.5 0 0 1 0 1H7v2.5a.5.5 0 0 1-1 0V7H3.5a.5.5 0 0 1 0-1H6V3.5a.5.5 0 0 1 .5-.5z"></path></svg></g><g ></g><g ></g><g ></g></g><image  id="v-4939"></image></g></g><g   id="j_325"  transform="translate(560,199)" style=""><g  id="v-4920" style="opacity: 1;"><rect  id="v-4921" rx="1" ry="1" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></rect><text  id="v-4922" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >SAP</tspan></text><text  id="v-4923" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-4924" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >SAP Server</tspan></text><g  id="v-4925" color="#000000" transform="matrix(1,0,0,1,222.5,211.9)" display="none" style="fill: rgb(0, 0, 0);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-4926"></image></g></g><g   id="j_330" ><path  stroke="#707070" d="M 710 499 L 639 640 C 636.3333333333333 646 636.3333333333333 652 639 658 L 710 799" id="v-4967" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.4472135493031434,0.8944272140983217,-0.8944272140983217,-0.4472135493031434,710,499)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4969" transform="matrix(-0.4472135493031436,-0.8944272140983216,0.8944272140983216,-0.4472135493031436,701.0557564184545,803.4721327316709)" style="opacity: 1;"></path><path  d="M 710 499 L 639 640 C 636.3333333333333 646 636.3333333333333 652 639 658 L 710 799" id="v-4968" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4958"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,637,649)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4962" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="149.39405822753906" height="30.145724296569824" transform="matrix(1,0,0,1,-74.7,-15.1)"></rect><text joint-selector="text" id="v-4961" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-9.2)"><tspan dy="0" >consume ILM</tspan></text></g><g id="v-4959"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,637,676)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4964" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="391.5019226074219" height="25.12143898010254" transform="matrix(1,0,0,1,-195.8,-12.6)"></rect><text joint-selector="text" id="v-4963" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-6.1)"><tspan dy="0" >[SAP Information Lifecycle Management Protocol]</tspan></text></g><g id="v-4960"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,627,685.25)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4966" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4965" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(635, 649)" id="v-5052"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4971" display="none"><g  id="v-4956"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4957"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4970" display="none"><g  id="v-4955" transform="translate(692.010176841885, 534.7262685252707) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_331" ><path  stroke="#707070" d="M 860 499 L 931 640 C 933.6666666666665 646 933.6666666666665 652 931 658 L 860 799" id="v-4984" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.4472136088532365,0.8944271843232765,-0.8944271843232765,0.4472136088532365,860,499)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4986" transform="matrix(0.44721378750350343,-0.8944270949981173,0.8944270949981173,0.44721378750350343,851.0556981085775,794.5278581726024)" style="opacity: 1;"></path><path  d="M 860 499 L 931 640 C 933.6666666666665 646 933.6666666666665 652 931 658 L 860 799" id="v-4985" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4975"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,933,649)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4979" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="136.28379821777344" height="30.145724296569824" transform="matrix(1,0,0,1,-68.1,-15.1)"></rect><text joint-selector="text" id="v-4978" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-9.2)"><tspan dy="0" >consume AL</tspan></text></g><g id="v-4976"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,933,676)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4981" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="211.96214294433594" height="25.12143898010254" transform="matrix(1,0,0,1,-106,-12.6)"></rect><text joint-selector="text" id="v-4980" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-6.1)"><tspan dy="0" >[SAP Archive Link Protocol]</tspan></text></g><g id="v-4977"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,923,685.25)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4983" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4982" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(935, 649)" id="v-5053"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4988" display="none"><g  id="v-4973"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4974"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4987" display="none"><g  id="v-4972" transform="translate(877.9898231581151, 534.7262685252707) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_332" ><path  stroke="#707070" d="M 747 1445 L 848 1315 C 851.9408217224401 1309.5225281918304 853.2741550557735 1303.5225281918304 852 1297 L 814 1099" id="v-5001" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.6117977317508867,-0.7910142447671028,0.7910142447671028,0.6117977317508867,747.010009765625,1445)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-5003" transform="matrix(0.18913364966573043,0.981951354479498,-0.981951354479498,0.18913364966573043,823.7094880832939,1097.1086079663603)" style="opacity: 1;"></path><path  d="M 747 1445 L 848 1315 C 851.9408217224401 1309.5225281918304 853.2741550557735 1303.5225281918304 852 1297 L 814 1099" id="v-5002" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4995"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,850.3043823242188,1288.1649169921875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4998" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.9267578125" height="59.67885780334473" transform="matrix(1,0,0,1,-76.5,-29.8)"></rect><text joint-selector="text" id="v-4997" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.9)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-4996"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,840.3043823242188,1330.1649169921875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-5000" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4999" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(853.9112325836602, 1306.7837922877457)" id="v-5054"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-5005" display="none"><g  id="v-4993"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4994"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-5004" display="none"><g  id="v-4992" transform="translate(771.5407994868223, 1413.412832343694) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_333" ><path  stroke="#707070" d="M 524 1445 L 283 1107 C 279 1101.6666666666665 277 1095.6666666666665 277 1089 L 277 705 C 277 698.3333333333333 279.66666666666663 693 285 689 L 565 499" id="v-5020" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.5809221316697684,-0.8139591371415719,0.8139591371415719,-0.5809221316697684,523.9400024414062,1445)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-5022" transform="matrix(-0.8265037060431091,0.5629312781299384,-0.5629312781299384,-0.8265037060431091,570.3992936893867,507.2650272576473)" style="opacity: 1;"></path><path  d="M 524 1445 L 283 1107 C 279 1101.6666666666665 277 1095.6666666666665 277 1089 L 277 705 C 277 698.3333333333333 279.66666666666663 693 285 689 L 565 499" id="v-5021" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-5011"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,277,935.7252807617188)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-5015" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="154.88937377929688" height="30.145724296569824" transform="matrix(1,0,0,1,-77.4,-15.1)"></rect><text joint-selector="text" id="v-5014" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-9.2)"><tspan dy="0" >consume SNC</tspan></text></g><g id="v-5012"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,277,962.7252807617188)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-5017" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="135.73426818847656" height="25.12143898010254" transform="matrix(1,0,0,1,-67.9,-12.6)"></rect><text joint-selector="text" id="v-5016" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-6.1)"><tspan dy="0" >[SAP SNC Access]</tspan></text></g><g id="v-5013"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,267,971.9752807617188)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-5019" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-5018" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(277, 1099)" id="v-5055"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(277, 695)" id="v-5056"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-5024" display="none"><g  id="v-5009"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-5010"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-5023" display="none"><g  id="v-5006" transform="translate(500.77782517198426, 1412.4311406976376) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_334" ><path  stroke="#707070" d="M 669 1099 L 568 1229 C 564.0591782775598 1234.4774718081694 562.7258449442265 1240.4774718081694 564 1247 L 602 1445" id="v-5037" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.6117979424107011,0.7910140818354832,-0.7910140818354832,-0.6117979424107011,668.989990234375,1099)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-5039" transform="matrix(-0.1891335189109964,-0.9819513796641582,0.9819513796641582,-0.1891335189109964,592.2905103573121,1446.891390977939)" style="opacity: 1;"></path><path  d="M 669 1099 L 568 1229 C 564.0591782775598 1234.4774718081694 562.7258449442265 1240.4774718081694 564 1247 L 602 1445" id="v-5038" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-5031"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,565.6956176757812,1255.8350830078125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-5034" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="174.2799835205078" height="58.945722579956055" transform="matrix(1,0,0,1,-87.1,-29.5)"></rect><text joint-selector="text" id="v-5033" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.6)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-5032"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,555.6956176757812,1297.8350830078125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-5036" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-5035" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(562.0887674163398, 1237.2162077122543)" id="v-5057"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-5041" display="none"><g  id="v-5029"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-5030"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-5040" display="none"><g  id="v-5028" transform="translate(644.4592005131776, 1130.587167656306) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g></g><g ></g><g ></g><g ></g></g></svg>
\ No newline at end of file
diff --git a/dsl/export/sc_web-key.svg b/dsl/export/sc_web-key.svg
new file mode 100644
index 0000000..7806e81
--- /dev/null
+++ b/dsl/export/sc_web-key.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 2500 500" style="background: #ffffff"><g transform="translate(25,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#dddddd" stroke-width="2" stroke="#3d6fdd"/><text x="225" y="96.25" text-anchor="middle" fill="#3d6fdd" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Kubernetes - crd</tspan></text><image xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/crd-256.png" x="195" y="153.75" width="60" height="60" opacity="1"/></g><g transform="translate(525,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#dddddd" stroke-width="2" stroke="#3d6fdd"/><text x="225" y="96.25" text-anchor="middle" fill="#3d6fdd" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Kubernetes - ds</tspan></text><image xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/ds-256.png" x="195" y="153.75" width="60" height="60" opacity="1"/></g><g transform="translate(1025,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#424c63" stroke-width="2" stroke="#3b4459"/><text x="225" y="131.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">nplus</tspan></text></g><g transform="translate(1525,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#11a63c" stroke-width="2" stroke="#0f9536"/><text x="225" y="131.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">nscale</tspan></text></g><g transform="translate(2025,170)"><path d="M390,0 L390,60 L450,30 L 390,0" style="fill:#707070" stroke-dasharray="" /><path d="M0,30 L390,30" style="stroke:#707070; stroke-width: 6; fill: none; stroke-dasharray: 30 30;" /><text x="225" y="76.25" text-anchor="middle" fill="#707070" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Relationship</tspan></text></g></svg>
\ No newline at end of file
diff --git a/dsl/export/sc_web.svg b/dsl/export/sc_web.svg
new file mode 100644
index 0000000..3c09893
--- /dev/null
+++ b/dsl/export/sc_web.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 3123 2708" style="background: #ffffff"><defs joint-selector="defs"></defs><g joint-selector="layers"  transform="matrix(1,0,0,1,0,0)"><g ></g><g ><g   id="j_322"  transform="translate(20,2663)"><g id="v-4888"><text  id="v-4889" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >Tuesday, December 19, 2023 at 8:42 AM Central European Standard Time</tspan></text></g></g><g   id="j_321"  transform="translate(20,2632)"><g id="v-4886"><text  id="v-4887" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >focus on nscale Web</tspan></text></g></g><g   id="j_320"  transform="translate(20,2588)"><g id="v-4884"><text  id="v-4885" font-size="36px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#000000" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >[System Context] nscale Application Layer Web</tspan></text></g></g><g   id="j_299"  transform="translate(199,200)" style=""><g id="v-4605"><rect  id="v-4606" width="2723" height="2308" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-4607" font-size="24px" xml:space="preserve" y="2293" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Kubernetes Cluster</tspan></text><text  id="v-4608" font-size="17px" xml:space="preserve" display="none" y="2293" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-4609" pointer-events="visible"></image></g></g><g   id="j_300"  transform="translate(1025,220)" style=""><g id="v-4610"><rect  id="v-4611" width="1060" height="2214" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-4612" font-size="24px" xml:space="preserve" y="2199" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Namespace</tspan></text><text  id="v-4613" font-size="17px" xml:space="preserve" display="none" y="2199" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-4614" pointer-events="visible"></image></g></g><g   id="j_302"  transform="translate(2452,1460)" style=""><g  id="v-4623" style="opacity: 1;"><rect  id="v-4624" rx="1" ry="1" stroke="#3d6fdd" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(61, 111, 221);"></rect><text  id="v-4625" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,39.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >Kubernetes Ingress</tspan><tspan dy="1.2em" x="0" >Controller</tspan></text><text  id="v-4626" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,124.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-4627" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >Layer 7 Load Balancer</tspan></text><g  id="v-4628" color="#3d6fdd" transform="matrix(1,0,0,1,222.5,270.6)" display="none" style="fill: rgb(61, 111, 221);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-4629" xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/ds-256.png" width="60" height="60" opacity="1" transform="matrix(1,0,0,1,195,195.6)"></image></g></g><g   id="j_305"  transform="translate(219,260)" style=""><g  id="v-4651" style="opacity: 1;"><rect  id="v-4652" rx="1" ry="1" stroke="#3d6fdd" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(61, 111, 221);"></rect><text  id="v-4653" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,39.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >Cert Manager Cluster</tspan><tspan dy="1.2em" x="0" >Issuer</tspan></text><text  id="v-4654" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,124.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-4655" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >provides certificates</tspan></text><g  id="v-4656" color="#3d6fdd" transform="matrix(1,0,0,1,222.5,270.6)" display="none" style="fill: rgb(61, 111, 221);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-4657" xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/crd-256.png" width="60" height="60" opacity="1" transform="matrix(1,0,0,1,195,195.6)"></image></g></g><g   id="j_301"  transform="translate(1045,240)" style=""><g id="v-4615"><rect  id="v-4616" width="715" height="1668" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-4617" font-size="24px" xml:space="preserve" y="1653" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Instance</tspan></text><text  id="v-4618" font-size="17px" xml:space="preserve" display="none" y="1653" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-4619" pointer-events="visible"></image></g></g><g   id="j_306"  transform="translate(1615,2060)" style=""><g  id="v-4664" style="opacity: 1;"><rect  id="v-4665" rx="1" ry="1" stroke="#3b4459" stroke-width="2" pointer-events="visiblePainted" fill="#424c63" width="450" height="300" style="fill: rgb(66, 76, 99); stroke: rgb(59, 68, 89);"></rect><text  id="v-4666" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,83.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nplus Environment</tspan></text><text  id="v-4667" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,125.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-4668" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,156.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >provides global configuration git</tspan><tspan dy="1.2em" x="0" >and web ui</tspan></text><g  id="v-4669" color="#ffffff" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-4670"></image></g></g><g   id="j_298"  transform="translate(1290,860)" style=""><g  id="v-4598" style="opacity: 1;"><rect  id="v-4599" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-4600" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,76.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Application Layer</tspan><tspan dy="1.2em" x="0" >Web</tspan></text><text  id="v-4601" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,161.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-4602" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,193.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >provides html web ui for nscale</tspan></text><g  id="v-4603" color="#ffffff" transform="matrix(1,0,0,1,222.5,233.1)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-4604"></image></g></g><g   id="j_304"  transform="translate(1065,1440)" style=""><g id="v-4643"><rect  id="v-4644" width="490" height="394" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-4645" font-size="24px" xml:space="preserve" y="379" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >nscale Application Layer Cluster</tspan></text><text  id="v-4646" font-size="17px" xml:space="preserve" display="none" y="379" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-4647" pointer-events="visible"></image></g></g><g   id="j_307"  transform="translate(1290,260)" style=""><g  id="v-4677" style="opacity: 1;"><rect  id="v-4678" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-4679" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,61.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Monitoring</tspan><tspan dy="1.2em" x="0" >Console</tspan></text><text  id="v-4680" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,146.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-4681" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,178.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >provides monitoring for all nscale</tspan><tspan dy="1.2em" x="0" >components</tspan></text><g  id="v-4682" color="#ffffff" transform="matrix(1,0,0,1,222.5,248.1)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-4683"></image></g></g><g   id="j_303"  transform="translate(1085,1460)" style=""><g  id="v-4636" style="opacity: 1;"><rect  id="v-4637" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-4638" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,83.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Application Layer</tspan></text><text  id="v-4639" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,125.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-4640" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,156.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Provides DMS and BPM</tspan><tspan dy="1.2em" x="0" >Functionality</tspan></text><g  id="v-4641" color="#ffffff" transform="matrix(1,0,0,1,210,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g  transform="translate(5 0)"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" viewBox="0 0 16 16"><path fill-rule="evenodd" d="M6.5 12a5.5 5.5 0 1 0 0-11 5.5 5.5 0 0 0 0 11zM13 6.5a6.5 6.5 0 1 1-13 0 6.5 6.5 0 0 1 13 0z"></path><path d="M10.344 11.742c.03.04.062.078.098.115l3.85 3.85a1 1 0 0 0 1.415-1.414l-3.85-3.85a1.007 1.007 0 0 0-.115-.1 6.538 6.538 0 0 1-1.398 1.4z"></path><path fill-rule="evenodd" d="M6.5 3a.5.5 0 0 1 .5.5V6h2.5a.5.5 0 0 1 0 1H7v2.5a.5.5 0 0 1-1 0V7H3.5a.5.5 0 0 1 0-1H6V3.5a.5.5 0 0 1 .5-.5z"></path></svg></g><g ></g><g ></g><g ></g></g><image  id="v-4642"></image></g></g><g   id="j_308" ><path  stroke="#707070" d="M 1640 560 L 1884 852 C 1888 857.3333333333333 1890 863.3333333333333 1890 870 L 1890 1150 C 1890 1156.6666666666665 1890 1163.3333333333333 1890 1170 L 1847 2060" id="v-4695" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.6401844186703124,0.7682212637591818,-0.7682212637591818,0.6401844186703124,1640,560)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4697" transform="matrix(0.047568469997474716,-0.9988679795959521,0.9988679795959521,0.047568469997474716,1837.1513581603158,2059.524225564735)" style="opacity: 1;"></path><path  d="M 1640 560 L 1884 852 C 1888 857.3333333333333 1890 863.3333333333333 1890 870 L 1890 1150 C 1890 1156.6666666666665 1890 1163.3333333333333 1890 1170 L 1847 2060" id="v-4696" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4689"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1885.3865966796875,1265.4876708984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4692" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="114.37533569335938" height="32.41816711425781" transform="matrix(1,0,0,1,-57.2,-16.2)"></rect><text joint-selector="text" id="v-4691" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-9.5)"><tspan dy="0" >mount etc</tspan></text></g><g id="v-4690"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1875.3865966796875,1292.4876708984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4694" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4693" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1890, 860)" id="v-4892"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(1890, 1160)" id="v-4893"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4699" display="none"><g  id="v-4687"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4688"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4698" display="none"><g  id="v-4684" transform="translate(1665.6487105639087, 590.694358543694) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_309" ><path  stroke="#707070" d="M 1464 1160 L 1361 1460" id="v-4712" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.323316080796343,0.946291029175746,-0.946291029175746,-0.323316080796343,1463.75,1160)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4714" transform="matrix(0.32331608079634266,-0.9462910291757461,0.9462910291757461,0.32331608079634266,1351.787083197154,1456.766858858794)" style="opacity: 1;"></path><path  d="M 1464 1160 L 1361 1460" id="v-4713" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4703"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1412.5,1310)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4707" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="102.52244567871094" height="32.41816711425781" transform="matrix(1,0,0,1,-51.3,-16.2)"></rect><text joint-selector="text" id="v-4706" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-9.5)"><tspan dy="0" >consume</tspan></text></g><g id="v-4704"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1412.5,1337)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4709" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="314.3548889160156" height="25.934532165527344" transform="matrix(1,0,0,1,-157.2,-13)"></rect><text joint-selector="text" id="v-4708" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-7.1)"><tspan dy="0" >[Advanced Connector Protocol Adapter]</tspan></text></g><g id="v-4705"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,1402.5,1346.25)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4711" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4710" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-4716" display="none"><g  id="v-4701"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4702"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4715" display="none"><g  id="v-4700" transform="translate(1451.0109077909567, 1197.8323074049808) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_310" ><path  stroke="#707070" d="M 1390 560 L 1146 852 C 1142 857.3333333333333 1140 863.3333333333333 1140 870 L 1140 1150 C 1140 1156.6666666666665 1141.3333333333333 1163 1144 1169 L 1253 1460" id="v-4728" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.6401844186703123,0.7682212637591818,-0.7682212637591818,-0.6401844186703123,1390,560)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4730" transform="matrix(-0.3533915852005396,-0.935475487391011,0.935475487391011,-0.3533915852005396,1243.9753035562203,1463.5339343977905)" style="opacity: 1;"></path><path  d="M 1390 560 L 1146 852 C 1142 857.3333333333333 1140 863.3333333333333 1140 870 L 1140 1150 C 1140 1156.6666666666665 1141.3333333333333 1163 1144 1169 L 1253 1460" id="v-4729" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4722"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1140,975.2315673828125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4725" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="90.26432800292969" height="32.41816711425781" transform="matrix(1,0,0,1,-45.1,-16.2)"></rect><text joint-selector="text" id="v-4724" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-9.5)"><tspan dy="0" >monitor</tspan></text></g><g id="v-4723"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1130,1002.2315673828125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4727" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4726" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1140, 860)" id="v-4894"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(1140, 1160)" id="v-4895"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4732" display="none"><g  id="v-4720"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4721"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4731" display="none"><g  id="v-4717" transform="translate(1364.3512894360915, 590.694358543694) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_311" ><path  stroke="#707070" d="M 516 560 L 798 1151 C 800.6666666666666 1157 804.3333333333333 1162.3333333333333 809 1167 L 1141 1460" id="v-4746" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.43077416676552527,0.9024597593507798,-0.9024597593507798,0.43077416676552527,515.5999755859375,560)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4748" transform="matrix(-0.7485497076103869,-0.6630786795218229,0.6630786795218229,-0.7485497076103869,1134.0391585230732,1467.4855465666346)" style="opacity: 1;"></path><path  d="M 516 560 L 798 1151 C 800.6666666666666 1157 804.3333333333333 1162.3333333333333 809 1167 L 1141 1460" id="v-4747" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4740"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,756.5493774414062,1064.130126953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4743" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.9701156616211" height="61.21816635131836" transform="matrix(1,0,0,1,-57,-30.6)"></rect><text joint-selector="text" id="v-4742" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.9)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-4741"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,746.5493774414062,1106.130126953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4745" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4744" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(802, 1160)" id="v-4896"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4750" display="none"><g  id="v-4738"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4739"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4749" display="none"><g  id="v-4736" transform="translate(533.2257912243124, 596.1008603318037) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_312" ><path  stroke="#707070" d="M 669 536 L 1290 884" id="v-4763" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8724221496342894,0.48875310006943734,-0.48875310006943734,0.8724221496342894,669,536.0499877929688)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4765" transform="matrix(-0.8724222147156936,-0.488752983899397,0.488752983899397,-0.8724222147156936,1285.1124491441005,892.6741909509947)" style="opacity: 1;"></path><path  d="M 669 536 L 1290 884" id="v-4764" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4757"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,979.5,710)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4760" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.9701156616211" height="61.21816635131836" transform="matrix(1,0,0,1,-57,-30.6)"></rect><text joint-selector="text" id="v-4759" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.9)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-4758"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,969.5,752)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4762" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4761" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-4767" display="none"><g  id="v-4755"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4756"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4766" display="none"><g  id="v-4754" transform="translate(703.8944900078801, 555.5544001976526) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_313" ><path  stroke="#707070" d="M 1692 1160 L 2020 1437 C 2024.7867930767184 1441.1873551858662 2030.453459743385 1444.1873551858662 2037 1446 L 2452 1552" id="v-4780" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.7634657083025543,0.6458483662951228,-0.6458483662951228,0.7634657083025543,1692.31005859375,1160)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4782" transform="matrix(-0.9686305245791873,-0.24850534572408797,0.24850534572408797,-0.9686305245791873,2449.514972491676,1561.9562708124076)" style="opacity: 1;"></path><path  d="M 1692 1160 L 2020 1437 C 2024.7867930767184 1441.1873551858662 2030.453459743385 1444.1873551858662 2037 1446 L 2452 1552" id="v-4781" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4774"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2027.5421142578125,1442.231201171875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4777" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="153.07452392578125" height="61.21816635131836" transform="matrix(1,0,0,1,-76.5,-30.6)"></rect><text joint-selector="text" id="v-4776" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.9)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-4775"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2017.5421142578125,1484.231201171875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4779" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4778" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2027.1801896150778, 1443.2810327787993)" id="v-4897"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4784" display="none"><g  id="v-4772"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4773"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4783" display="none"><g  id="v-4771" transform="translate(1722.5601759964877, 1185.8084413141069) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_314" ><path  stroke="#707070" d="M 1602 1160 L 1710 1347 C 1713.3333333333333 1353 1715.3333333333333 1359.3333333333333 1716 1366 L 1818 2060" id="v-4795" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.5004284614183886,0.8657778901094809,-0.8657778901094809,0.5004284614183886,1601.7099609375,1160)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4797" transform="matrix(-0.14482083527223688,-0.989457894844976,0.989457894844976,-0.14482083527223688,1808.1454262792727,2061.448256051172)" style="opacity: 1;"></path><path  d="M 1602 1160 L 1710 1347 C 1713.3333333333333 1353 1715.3333333333333 1359.3333333333333 1716 1366 L 1818 2060" id="v-4796" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4789"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1749.8406982421875,1596.2491455078125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4792" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="130.6412811279297" height="32.41816711425781" transform="matrix(1,0,0,1,-64.8,-16.2)"></rect><text joint-selector="text" id="v-4791" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-9.5)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-4790"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1739.8406982421875,1623.2491455078125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4794" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4793" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1715, 1356)" id="v-4898"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4799" display="none"><g  id="v-4787"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4788"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4798" display="none"><g  id="v-4785" transform="translate(1622.0049315216102, 1194.6381684679732) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_315" ><path  stroke="#707070" d="M 1535 1610 L 1756 1610 C 1762.6666666666665 1610 1769.3333333333333 1610 1776 1610 L 2211 1610 C 2217.6666666666665 1610 2224.333333333333 1610 2231 1610 L 2452 1610" id="v-4814" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(1,0,0,1,1535,1610)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4816" transform="matrix(-1,1.2246467991473532e-16,-1.2246467991473532e-16,-1,2452,1620)" style="opacity: 1;"></path><path  d="M 1535 1610 L 1756 1610 C 1762.6666666666665 1610 1769.3333333333333 1610 1776 1610 L 2211 1610 C 2217.6666666666665 1610 2224.333333333333 1610 2231 1610 L 2452 1610" id="v-4815" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4808"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1993.5,1610)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4811" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="153.07452392578125" height="61.21816635131836" transform="matrix(1,0,0,1,-76.5,-30.6)"></rect><text joint-selector="text" id="v-4810" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.9)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-4809"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1983.5,1652)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4813" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4812" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1766, 1610)" id="v-4899"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(2221, 1610)" id="v-4900"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4818" display="none"><g  id="v-4806"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4807"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4817" display="none"><g  id="v-4803" transform="translate(1575, 1610) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_316" ><path  stroke="#707070" d="M 1515 560 L 1515 860" id="v-4828" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(6.123233995736766e-17,1,-1,6.123233995736766e-17,1515,560)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4830" transform="matrix(-1.8369701987210297e-16,-1,1,-1.8369701987210297e-16,1505,860)" style="opacity: 1;"></path><path  d="M 1515 560 L 1515 860" id="v-4829" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4822"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1515,710)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4825" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="90.26432800292969" height="32.41816711425781" transform="matrix(1,0,0,1,-45.1,-16.2)"></rect><text joint-selector="text" id="v-4824" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-9.5)"><tspan dy="0" >monitor</tspan></text></g><g id="v-4823"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1505,737)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4827" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4826" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-4832" display="none"><g  id="v-4820"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4821"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4831" display="none"><g  id="v-4819" transform="translate(1515, 600) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_317" ><path  stroke="#707070" d="M 1411 1760 L 1546 1960 C 1549.9999999999998 1965.3333333333333 1554.6666666666665 1970 1560 1974 L 1661 2060" id="v-4843" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.5600200206051729,0.828479074280927,-0.828479074280927,0.5600200206051729,1411.4000244140625,1760)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4845" transform="matrix(-0.7656070602425928,-0.643308502436191,0.643308502436191,-0.7656070602425928,1655.056969953064,2067.656050158038)" style="opacity: 1;"></path><path  d="M 1411 1760 L 1546 1960 C 1549.9999999999998 1965.3333333333333 1554.6666666666665 1970 1560 1974 L 1661 2060" id="v-4844" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4837"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1521.1641845703125,1923.2061767578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4840" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="130.6412811279297" height="32.41816711425781" transform="matrix(1,0,0,1,-64.8,-16.2)"></rect><text joint-selector="text" id="v-4839" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-9.5)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-4838"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1511.1641845703125,1950.2061767578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4842" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4841" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1552, 1968)" id="v-4901"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4847" display="none"><g  id="v-4835"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4836"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4846" display="none"><g  id="v-4833" transform="translate(1433.3789142000426, 1793.1539469630259) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_318" ><path  stroke="#707070" d="M 2500 1460 L 2172 1183 C 2167.213206923281 1178.8126448141338 2161.5465402566147 1175.8126448141338 2155 1174 L 1740 1068" id="v-4860" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.7634657513025088,-0.6458483154643169,0.6458483154643169,-0.7634657513025088,2499.68994140625,1460)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4862" transform="matrix(0.9686304997613161,0.24850544245980394,-0.24850544245980394,0.9686304997613161,1742.4850287238598,1058.0437284684137)" style="opacity: 1;"></path><path  d="M 2500 1460 L 2172 1183 C 2167.213206923281 1178.8126448141338 2161.5465402566147 1175.8126448141338 2155 1174 L 1740 1068" id="v-4861" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4854"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2164.4580078125,1177.768798828125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4857" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="174.45025634765625" height="61.21816635131836" transform="matrix(1,0,0,1,-87.2,-30.6)"></rect><text joint-selector="text" id="v-4856" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.9)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-4855"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2154.4580078125,1219.768798828125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4859" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4858" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2164.819810384922, 1176.7189672212007)" id="v-4902"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4864" display="none"><g  id="v-4852"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4853"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4863" display="none"><g  id="v-4851" transform="translate(2469.439824003512, 1434.1915586858931) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_319" ><path  stroke="#707070" d="M 2452 1610 L 2231 1610 C 2224.333333333333 1610 2217.6666666666665 1610 2211 1610 L 1776 1610 C 1769.3333333333333 1610 1762.6666666666665 1610 1756 1610 L 1535 1610" id="v-4879" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-1,1.2246467991473532e-16,-1.2246467991473532e-16,-1,2452,1610)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-4881" transform="matrix(1,0,0,1,1535,1600)" style="opacity: 1;"></path><path  d="M 2452 1610 L 2231 1610 C 2224.333333333333 1610 2217.6666666666665 1610 2211 1610 L 1776 1610 C 1769.3333333333333 1610 1762.6666666666665 1610 1756 1610 L 1535 1610" id="v-4880" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-4873"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1993.5,1610)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4876" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="174.45025634765625" height="61.21816635131836" transform="matrix(1,0,0,1,-87.2,-30.6)"></rect><text joint-selector="text" id="v-4875" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.9)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-4874"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1983.5,1652)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-4878" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-4877" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2221, 1610)" id="v-4903"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(1766, 1610)" id="v-4904"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-4883" display="none"><g  id="v-4871"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-4872"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-4882" display="none"><g  id="v-4868" transform="translate(2412, 1610) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g></g><g ></g><g ></g><g ></g></g></svg>
\ No newline at end of file
diff --git a/dsl/export/sl_all-key.svg b/dsl/export/sl_all-key.svg
new file mode 100644
index 0000000..edd2ed6
--- /dev/null
+++ b/dsl/export/sl_all-key.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 2500 1500" style="background: #ffffff"><g transform="translate(25,100)"><path id="keyDatabaseCylinderPath" d="M 0,22.5 a 225,22.5 0,0,0 450 0 a 225,22.5 0,0,0 -450 0 l 0,255 a 225,22.5 0,0,0 450 0 l 0,-255" fill="#707070" stroke-width="2" stroke="#656565"></path><text x="225" y="142.5" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Database</tspan></text></g><g transform="translate(525,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#dddddd" stroke-width="2" stroke="#c7c7c7"/><text x="225" y="131.25" text-anchor="middle" fill="#000000" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Element</tspan></text></g><g transform="translate(1025,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#dddddd" stroke-width="2" stroke="#3d6fdd"/><text x="225" y="96.25" text-anchor="middle" fill="#3d6fdd" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Kubernetes - crd</tspan></text><image xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/crd-256.png" x="195" y="153.75" width="60" height="60" opacity="1"/></g><g transform="translate(1525,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#dddddd" stroke-width="2" stroke="#3d6fdd"/><text x="225" y="96.25" text-anchor="middle" fill="#3d6fdd" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Kubernetes - ds</tspan></text><image xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/ds-256.png" x="195" y="153.75" width="60" height="60" opacity="1"/></g><g transform="translate(2025,55.5)"><polygon points="112.5,0 337.5,0 450,194.5 337.5,389 112.5,389 0,194.5" fill="#dddddd" stroke-width="2" stroke="#3d6fdd"/><text x="225" y="140.75" text-anchor="middle" fill="#3d6fdd" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Kubernetes - svc</tspan></text><image xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/svc-256.png" x="195" y="198.25" width="60" height="60" opacity="1"/></g><g transform="translate(25,600)"><rect width="450" height="300" rx="20" ry="20" x="0" y="0" fill="#0f9536" stroke-width="5" stroke="#0f9536"/><rect width="370" height="280" rx="5" ry="5" x="40" y="10" fill="#11a63c" stroke-width="0"/><ellipse cx="20" cy="150" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><line x1="430" y1="125" x2="430" y2="175" stroke-width="5" stroke="#11a63c"/><text x="225" y="131.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">mobileclient, nscale</tspan></text></g><g transform="translate(525,600)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#424c63" stroke-width="2" stroke="#3b4459"/><text x="225" y="131.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">nplus</tspan></text></g><g transform="translate(1025,600)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#11a63c" stroke-width="2" stroke="#0f9536"/><text x="225" y="131.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">nscale</tspan></text></g><g transform="translate(1525,525)"><rect x="0" y="180" width="450" height="270" rx="90" fill="#dddddd" stroke-width="2" stroke="#c7c7c7"/><circle cx="225" cy="100" r="100" fill="#dddddd" stroke-width="2" stroke="#c7c7c7"/><line x1="90" y1="300" x2="90" y2="450" stroke-width="2" stroke="#c7c7c7"/><line x1="360" y1="300" x2="360" y2="450" stroke-width="2" stroke="#c7c7c7"/><text x="225" y="256.25" text-anchor="middle" fill="#000000" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Person</tspan></text></g><g transform="translate(2025,600)"><rect width="450" height="300" rx="10" ry="10" x="0" y="0" fill="#0f9536" stroke-width="5" stroke="#0f9536"/><rect width="430" height="250" rx="10" ry="10" x="10" y="40" fill="#11a63c" stroke-width="0"/><ellipse cx="20" cy="20" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><ellipse cx="50" cy="20" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><ellipse cx="80" cy="20" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><text x="225" y="141.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">richclient, nscale</tspan></text></g><g transform="translate(25,1100)"><rect width="450" height="300" rx="10" ry="10" x="0" y="0" fill="#0f9536" stroke-width="5" stroke="#0f9536"/><rect width="430" height="250" rx="10" ry="10" x="10" y="40" fill="#11a63c" stroke-width="0"/><rect width="340" height="20" rx="10" ry="10" x="100" y="10" fill="#11a63c" stroke-width="0"/><ellipse cx="20" cy="20" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><ellipse cx="50" cy="20" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><ellipse cx="80" cy="20" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><text x="225" y="141.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">webclient, nscale</tspan></text></g><g transform="translate(525,1170)"><path d="M390,0 L390,60 L450,30 L 390,0" style="fill:#707070" stroke-dasharray="" /><path d="M0,30 L390,30" style="stroke:#707070; stroke-width: 6; fill: none; stroke-dasharray: 30 30;" /><text x="225" y="76.25" text-anchor="middle" fill="#707070" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Relationship</tspan></text></g></svg>
\ No newline at end of file
diff --git a/dsl/export/sl_all.svg b/dsl/export/sl_all.svg
new file mode 100644
index 0000000..b7426a2
--- /dev/null
+++ b/dsl/export/sl_all.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 13745 5398" style="background: #ffffff"><defs joint-selector="defs"></defs><g joint-selector="layers"  transform="matrix(1,0,0,1,0,0)"><g ></g><g ><g   id="j_140"  transform="translate(20,5353)"><g id="v-2106"><text  id="v-2107" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >Tuesday, December 19, 2023 at 8:42 AM Central European Standard Time</tspan></text></g></g><g   id="j_139"  transform="translate(20,5322)"><g id="v-2104"><text  id="v-2105" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >shows all Landscape</tspan></text></g></g><g   id="j_138"  transform="translate(20,5278)"><g id="v-2102"><text  id="v-2103" font-size="36px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#000000" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >Overview</tspan></text></g></g><g   id="j_14"  transform="translate(4009,1670)" style=""><g id="v-139"><rect  id="v-140" width="9536" height="3528" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-141" font-size="24px" xml:space="preserve" y="3513" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Kubernetes Cluster</tspan></text><text  id="v-142" font-size="17px" xml:space="preserve" display="none" y="3513" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-143" pointer-events="visible"></image></g></g><g   id="j_15"  transform="translate(5456,1690)" style=""><g id="v-144"><rect  id="v-145" width="5802" height="3434" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-146" font-size="24px" xml:space="preserve" y="3419" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Namespace</tspan></text><text  id="v-147" font-size="17px" xml:space="preserve" display="none" y="3419" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-148" pointer-events="visible"></image></g></g><g   id="j_35"  transform="translate(4029,3550)" style=""><g  id="v-353" style="opacity: 1;"><rect  id="v-354" rx="1" ry="1" stroke="#3d6fdd" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(61, 111, 221);"></rect><text  id="v-355" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,39.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >Kubernetes Ingress</tspan><tspan dy="1.2em" x="0" >Controller</tspan></text><text  id="v-356" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,124.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-357" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >Layer 7 Load Balancer</tspan></text><g  id="v-358" color="#3d6fdd" transform="matrix(1,0,0,1,222.5,270.6)" display="none" style="fill: rgb(61, 111, 221);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-359" xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/ds-256.png" width="60" height="60" opacity="1" transform="matrix(1,0,0,1,195,195.6)"></image></g></g><g   id="j_37"  transform="translate(13075,2350)" style=""><g  id="v-376" style="opacity: 1;"><rect  id="v-377" rx="1" ry="1" stroke="#3d6fdd" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(61, 111, 221);"></rect><text  id="v-378" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,39.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >Cert Manager Cluster</tspan><tspan dy="1.2em" x="0" >Issuer</tspan></text><text  id="v-379" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,124.4)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-380" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >provides certificates</tspan></text><g  id="v-381" color="#3d6fdd" transform="matrix(1,0,0,1,222.5,270.6)" display="none" style="fill: rgb(61, 111, 221);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-382" xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/crd-256.png" width="60" height="60" opacity="1" transform="matrix(1,0,0,1,195,195.6)"></image></g></g><g   id="j_16"  transform="translate(5476,1710)" style=""><g id="v-149"><rect  id="v-150" width="5561" height="2814" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-151" font-size="24px" xml:space="preserve" y="2799" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Instance</tspan></text><text  id="v-152" font-size="17px" xml:space="preserve" display="none" y="2799" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-153" pointer-events="visible"></image></g></g><g   id="j_39"  transform="translate(10788,4750)" style=""><g  id="v-396" style="opacity: 1;"><rect  id="v-397" rx="1" ry="1" stroke="#3b4459" stroke-width="2" pointer-events="visiblePainted" fill="#424c63" width="450" height="300" style="fill: rgb(66, 76, 99); stroke: rgb(59, 68, 89);"></rect><text  id="v-398" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,83.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nplus Environment</tspan></text><text  id="v-399" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,125.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-400" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,156.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >provides global configuration git</tspan><tspan dy="1.2em" x="0" >and web ui</tspan></text><g  id="v-401" color="#ffffff" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-402"></image></g></g><g   id="j_13"  transform="translate(7392,2950)" style=""><g  id="v-132" style="opacity: 1;"><rect  id="v-133" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-134" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,113.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale ILM Connector</tspan></text><text  id="v-135" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-136" font-size="24" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,186.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><g  id="v-137" color="#ffffff" transform="matrix(1,0,0,1,222.5,196.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-138"></image></g></g><g   id="j_19"  transform="translate(9200,2950)" style=""><g  id="v-183" style="opacity: 1;"><rect  id="v-184" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-185" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,76.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Application Layer</tspan><tspan dy="1.2em" x="0" >Web</tspan></text><text  id="v-186" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,161.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-187" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,193.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >provides html web ui for nscale</tspan></text><g  id="v-188" color="#ffffff" transform="matrix(1,0,0,1,210,233.1)" display="none" style="fill: rgb(255, 255, 255);"><g  transform="translate(5 0)"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" viewBox="0 0 16 16"><path fill-rule="evenodd" d="M6.5 12a5.5 5.5 0 1 0 0-11 5.5 5.5 0 0 0 0 11zM13 6.5a6.5 6.5 0 1 1-13 0 6.5 6.5 0 0 1 13 0z"></path><path d="M10.344 11.742c.03.04.062.078.098.115l3.85 3.85a1 1 0 0 0 1.415-1.414l-3.85-3.85a1.007 1.007 0 0 0-.115-.1 6.538 6.538 0 0 1-1.398 1.4z"></path><path fill-rule="evenodd" d="M6.5 3a.5.5 0 0 1 .5.5V6h2.5a.5.5 0 0 1 0 1H7v2.5a.5.5 0 0 1-1 0V7H3.5a.5.5 0 0 1 0-1H6V3.5a.5.5 0 0 1 .5-.5z"></path></svg></g><g ></g><g ></g><g ></g></g><image  id="v-189"></image></g></g><g   id="j_20"  transform="translate(10038,1750)" style=""><g  id="v-193" style="opacity: 1;"><rect  id="v-194" rx="1" ry="1" stroke="#3b4459" stroke-width="2" pointer-events="visiblePainted" fill="#424c63" width="450" height="300" style="fill: rgb(66, 76, 99); stroke: rgb(59, 68, 89);"></rect><text  id="v-195" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,68.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Application</tspan></text><text  id="v-196" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,110.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-197" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,141.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Initialize Document Areas and (Re-)</tspan><tspan dy="1.2em" x="0" >Import Generic Base Apps when</tspan><tspan dy="1.2em" x="0" >updates occur</tspan></text><g  id="v-198" color="#ffffff" transform="matrix(1,0,0,1,222.5,241.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-199"></image></g></g><g   id="j_22"  transform="translate(10567,2950)" style=""><g  id="v-210" style="opacity: 1;"><rect  id="v-211" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-212" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Pipeliner AC</tspan></text><text  id="v-213" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-214" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Pipeliner im AC Modus</tspan></text><g  id="v-215" color="#ffffff" transform="matrix(1,0,0,1,222.5,211.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-216"></image></g></g><g   id="j_23"  transform="translate(8142,1750)" style=""><g  id="v-223" style="opacity: 1;"><rect  id="v-224" rx="1" ry="1" stroke="#3b4459" stroke-width="2" pointer-events="visiblePainted" fill="#424c63" width="450" height="300" style="fill: rgb(66, 76, 99); stroke: rgb(59, 68, 89);"></rect><text  id="v-225" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,46.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nplus Administrator</tspan><tspan dy="1.2em" x="0" >Server</tspan></text><text  id="v-226" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,131.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-227" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,163.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Layer 4 Proxy with RMS to simulate</tspan><tspan dy="1.2em" x="0" >a classic environment to allow</tspan><tspan dy="1.2em" x="0" >offline configuration</tspan></text><g  id="v-228" color="#ffffff" transform="matrix(1,0,0,1,222.5,263.1)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-229"></image></g></g><g   id="j_25"  transform="translate(8142,2950)" style=""><g  id="v-245" style="opacity: 1;"><rect  id="v-246" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-247" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,113.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale CMIS Connector</tspan></text><text  id="v-248" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-249" font-size="24" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,186.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><g  id="v-250" color="#ffffff" transform="matrix(1,0,0,1,222.5,196.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-251"></image></g></g><g   id="j_29"  transform="translate(5697,1730)" style=""><g id="v-291"><rect  id="v-292" width="1415" height="2194" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-293" font-size="24px" xml:space="preserve" y="2179" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >nscale Application Layer Cluster</tspan></text><text  id="v-294" font-size="17px" xml:space="preserve" display="none" y="2179" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-295" pointer-events="visible"></image></g></g><g   id="j_30"  transform="translate(7571,4150)" style=""><g  id="v-299" style="opacity: 1;"><rect  id="v-300" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-301" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,113.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Storage Layer</tspan></text><text  id="v-302" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-303" font-size="24" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,186.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><g  id="v-304" color="#ffffff" transform="matrix(1,0,0,1,222.5,196.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-305"></image></g></g><g   id="j_31"  transform="translate(5496,4150)" style=""><g  id="v-306" style="opacity: 1;"><path  d="M 0,30 a 225,30 0,0,0 450 0 a 225,30 0,0,0 -450 0 l 0,240 a 225,30 0,0,0 450 0 l 0,-240" id="v-307" stroke="#656565" stroke-width="2" pointer-events="visiblePainted" fill="#707070" style="fill: rgb(112, 112, 112); stroke: rgb(101, 101, 101);"></path><rect  id="v-308" stroke-width="0" pointer-events="visiblePainted" fill="none" stroke="none" width="450" height="270" x="0" y="30"></rect><text  id="v-309" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,143.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Database</tspan></text><text  id="v-310" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,185.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-311" font-size="24" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,216.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><g  id="v-312" font-weight="normal" text-anchor="middle" color="#ffffff" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-313"></image></g></g><g   id="j_33"  transform="translate(9246,4150)" style=""><g  id="v-330" style="opacity: 1;"><rect  id="v-331" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-332" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,113.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Rendition Server</tspan></text><text  id="v-333" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-334" font-size="24" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,186.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><g  id="v-335" color="#ffffff" transform="matrix(1,0,0,1,222.5,196.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-336"></image></g></g><g   id="j_42"  transform="translate(8671,2350)" style=""><g  id="v-436" style="opacity: 1;"><rect  id="v-437" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-438" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,61.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Monitoring</tspan><tspan dy="1.2em" x="0" >Console</tspan></text><text  id="v-439" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,146.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-440" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,178.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >provides monitoring for all nscale</tspan><tspan dy="1.2em" x="0" >components</tspan></text><g  id="v-441" color="#ffffff" transform="matrix(1,0,0,1,222.5,248.1)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-442"></image></g></g><g   id="j_28"  transform="translate(6025,1750)" style=""><g  id="v-284" style="opacity: 1;"><polygon  id="v-285" stroke="#3d6fdd" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" points="112.5,0 337.5,0 450,194.5 337.5,389 112.5,389 0,194.5" style="fill: rgb(221, 221, 221); stroke: rgb(61, 111, 221);"></polygon><text  id="v-286" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,100.7)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >nscale Cluster Service</tspan></text><text  id="v-287" font-size="17" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,143.3)" style="fill: rgb(61, 111, 221);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><text  id="v-288" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#3d6fdd" transform="matrix(1,0,0,1,225,153.3)" style="fill: rgb(61, 111, 221);"><tspan dy="0" >selects all cluster members,</tspan><tspan dy="1.2em" x="0" >nappl and pipeliner</tspan></text><g  id="v-289" font-weight="normal" text-anchor="middle" color="#3d6fdd" transform="matrix(1,0,0,1,222.1,298.3)" display="none" style="fill: rgb(61, 111, 221);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-290" xlink:href="https://static.structurizr.com/themes/kubernetes-v0.3/svc-256.png" width="60" height="60" opacity="1" transform="matrix(1,0,0,1,190.3,223.3)"></image></g></g><g   id="j_32"  transform="translate(6642,3550)" style=""><g  id="v-320" style="opacity: 1;"><rect  id="v-321" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-322" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,83.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Application Layer</tspan></text><text  id="v-323" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,125.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-324" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,156.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Provides DMS and BPM</tspan><tspan dy="1.2em" x="0" >Functionality</tspan></text><g  id="v-325" color="#ffffff" transform="matrix(1,0,0,1,210,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g  transform="translate(5 0)"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" viewBox="0 0 16 16"><path fill-rule="evenodd" d="M6.5 12a5.5 5.5 0 1 0 0-11 5.5 5.5 0 0 0 0 11zM13 6.5a6.5 6.5 0 1 1-13 0 6.5 6.5 0 0 1 13 0z"></path><path d="M10.344 11.742c.03.04.062.078.098.115l3.85 3.85a1 1 0 0 0 1.415-1.414l-3.85-3.85a1.007 1.007 0 0 0-.115-.1 6.538 6.538 0 0 1-1.398 1.4z"></path><path fill-rule="evenodd" d="M6.5 3a.5.5 0 0 1 .5.5V6h2.5a.5.5 0 0 1 0 1H7v2.5a.5.5 0 0 1-1 0V7H3.5a.5.5 0 0 1 0-1H6V3.5a.5.5 0 0 1 .5-.5z"></path></svg></g><g ></g><g ></g><g ></g></g><image  id="v-326"></image></g></g><g   id="j_36"  transform="translate(5717,2950)" style=""><g  id="v-366" style="opacity: 1;"><rect  id="v-367" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-368" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Pipeliner CM</tspan></text><text  id="v-369" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-370" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Pipeliner im Core Modus</tspan></text><g  id="v-371" color="#ffffff" transform="matrix(1,0,0,1,222.5,211.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-372"></image></g></g><g   id="j_41"  transform="translate(6025,2350)" style=""><g  id="v-423" style="opacity: 1;"><rect  id="v-424" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-425" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,91.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Application Layer</tspan><tspan dy="1.2em" x="0" >(Jobs)</tspan></text><text  id="v-426" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,176.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-427" font-size="24" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,208.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><g  id="v-428" color="#ffffff" transform="matrix(1,0,0,1,222.5,218.1)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-429"></image></g></g><g   id="j_17"  transform="translate(654,2950)" style=""><g  id="v-160" style="opacity: 1;"><rect  id="v-161" rx="1" ry="1" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></rect><text  id="v-162" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >3rd Party Software</tspan></text><text  id="v-163" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-164" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >Any Application with Access Rights</tspan></text><g  id="v-165" color="#000000" transform="matrix(1,0,0,1,222.5,211.9)" display="none" style="fill: rgb(0, 0, 0);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-166"></image></g></g><g   id="j_18"  transform="translate(1975,1750)" style=""><g  id="v-167" style="opacity: 1;"><rect  id="v-168" rx="20" ry="20" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#0f9536" width="450" height="300" style="fill: rgb(15, 149, 54); stroke: rgb(15, 149, 54);"></rect><rect  id="v-169" rx="5" ry="5" stroke="#0f9536" stroke-width="0" pointer-events="visiblePainted" fill="#11a63c" width="370" height="280" x="40" y="10" style="fill: rgb(17, 166, 60);"></rect><ellipse  id="v-175" fill="#11a63c" cx="20" cy="150" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><line  style="stroke-width: 2px; stroke: rgb(17, 166, 60);" id="v-176" stroke="#11a63c" x1="430" y1="125" x2="430" y2="175"></line><text  id="v-170" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Mobile</tspan></text><text  id="v-171" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-172" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Rich Mobile Client</tspan></text><g  id="v-173" font-weight="normal" text-anchor="middle" color="#ffffff" transform="matrix(1,0,0,1,222.5,211.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-174"></image></g></g><g   id="j_21"  transform="translate(2621,2950)" style=""><g  id="v-200" style="opacity: 1;"><rect  id="v-201" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-202" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Cockpit</tspan></text><text  id="v-203" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-204" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Rich Windows Client</tspan></text><g  id="v-205" color="#ffffff" transform="matrix(1,0,0,1,222.5,211.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-206"></image></g></g><g   id="j_24"  transform="translate(1225,1750)" style=""><g  id="v-230" style="opacity: 1;"><rect  id="v-231" rx="10" ry="10" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#0f9536" width="450" height="300" style="fill: rgb(15, 149, 54); stroke: rgb(15, 149, 54);"></rect><rect  id="v-232" rx="10" ry="10" stroke="#0f9536" stroke-width="0" pointer-events="visiblePainted" fill="#11a63c" width="430" height="250" x="10" y="40" style="fill: rgb(17, 166, 60);"></rect><ellipse  id="v-239" fill="#11a63c" cx="20" cy="20" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><ellipse  id="v-240" fill="#11a63c" cx="50" cy="20" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><ellipse  id="v-241" fill="#11a63c" cx="80" cy="20" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><rect  id="v-233" rx="10" ry="10" stroke="#444444" stroke-width="0" pointer-events="visiblePainted" fill="#11a63c" width="340" height="20" x="100" y="10" style="fill: rgb(17, 166, 60);"></rect><text  id="v-234" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,113.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Web</tspan></text><text  id="v-235" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-236" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,186.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Thin Web Client</tspan></text><g  id="v-237" font-weight="normal" text-anchor="middle" color="#ffffff" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-238"></image></g></g><g   id="j_26"  transform="translate(3371,1750)" style=""><g  id="v-258" style="opacity: 1;"><rect  id="v-259" rx="1" ry="1" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></rect><text  id="v-260" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,83.1)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >Identity Provider</tspan></text><text  id="v-261" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,125.6)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-262" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,156.9)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >Provider or Broker for Identity</tspan><tspan dy="1.2em" x="0" >Information and SSO Services</tspan></text><g  id="v-263" color="#000000" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(0, 0, 0);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-264"></image></g></g><g   id="j_27"  transform="translate(2338,900)" style=""><g  id="v-268" style="opacity: 1;"><rect  x="0" y="160" width="400" height="240" rx="70" id="v-270" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></rect><circle  cx="200" cy="88.88888888888889" r="88.88888888888889" id="v-269" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></circle><line  x1="80" y1="266.6666666666667" x2="80" y2="400" id="v-276" stroke="#c7c7c7" stroke-width="2" style="stroke: rgb(199, 199, 199);"></line><line  x1="320" y1="266.6666666666667" x2="320" y2="400" id="v-277" stroke="#c7c7c7" stroke-width="2" style="stroke: rgb(199, 199, 199);"></line><text  id="v-271" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,200,213.1)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >User</tspan></text><text  id="v-272" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,200,255.6)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >[Person]</tspan></text><text  id="v-273" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,200,286.9)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >uses the Business Applications</tspan><tspan dy="1.2em" x="0" >running in the Environment</tspan></text><g  id="v-274" font-weight="normal" text-anchor="middle" color="#000000" transform="matrix(1,0,0,1,197.5,356.9)" display="none" style="fill: rgb(0, 0, 0);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-275"></image></g></g><g   id="j_34"  transform="translate(1346,200)" style=""><g  id="v-340" style="opacity: 1;"><rect  x="0" y="160" width="400" height="240" rx="70" id="v-342" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></rect><circle  cx="200" cy="88.88888888888889" r="88.88888888888889" id="v-341" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></circle><line  x1="80" y1="266.6666666666667" x2="80" y2="400" id="v-348" stroke="#c7c7c7" stroke-width="2" style="stroke: rgb(199, 199, 199);"></line><line  x1="320" y1="266.6666666666667" x2="320" y2="400" id="v-349" stroke="#c7c7c7" stroke-width="2" style="stroke: rgb(199, 199, 199);"></line><text  id="v-343" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,200,213.1)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >Admin</tspan></text><text  id="v-344" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,200,255.6)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >[Person]</tspan></text><text  id="v-345" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,200,286.9)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >Maintains and Operates the</tspan><tspan dy="1.2em" x="0" >Environment</tspan></text><g  id="v-346" font-weight="normal" text-anchor="middle" color="#000000" transform="matrix(1,0,0,1,197.5,356.9)" display="none" style="fill: rgb(0, 0, 0);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-347"></image></g></g><g   id="j_38"  transform="translate(3371,2950)" style=""><g  id="v-383" style="opacity: 1;"><rect  id="v-384" rx="1" ry="1" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></rect><text  id="v-385" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >SAP</tspan></text><text  id="v-386" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-387" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >SAP Server</tspan></text><g  id="v-388" color="#000000" transform="matrix(1,0,0,1,210,211.9)" display="none" style="fill: rgb(0, 0, 0);"><g  transform="translate(5 0)"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" viewBox="0 0 16 16"><path fill-rule="evenodd" d="M6.5 12a5.5 5.5 0 1 0 0-11 5.5 5.5 0 0 0 0 11zM13 6.5a6.5 6.5 0 1 1-13 0 6.5 6.5 0 0 1 13 0z"></path><path d="M10.344 11.742c.03.04.062.078.098.115l3.85 3.85a1 1 0 0 0 1.415-1.414l-3.85-3.85a1.007 1.007 0 0 0-.115-.1 6.538 6.538 0 0 1-1.398 1.4z"></path><path fill-rule="evenodd" d="M6.5 3a.5.5 0 0 1 .5.5V6h2.5a.5.5 0 0 1 0 1H7v2.5a.5.5 0 0 1-1 0V7H3.5a.5.5 0 0 1 0-1H6V3.5a.5.5 0 0 1 .5-.5z"></path></svg></g><g ></g><g ></g><g ></g></g><image  id="v-389"></image></g></g><g   id="j_40"  transform="translate(5775,950)" style=""><g  id="v-409" style="opacity: 1;"><rect  id="v-410" rx="10" ry="10" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#0f9536" width="450" height="300" style="fill: rgb(15, 149, 54); stroke: rgb(15, 149, 54);"></rect><rect  id="v-411" rx="10" ry="10" stroke="#0f9536" stroke-width="0" pointer-events="visiblePainted" fill="#11a63c" width="430" height="250" x="10" y="40" style="fill: rgb(17, 166, 60);"></rect><ellipse  id="v-417" fill="#11a63c" cx="20" cy="20" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><ellipse  id="v-418" fill="#11a63c" cx="50" cy="20" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><ellipse  id="v-419" fill="#11a63c" cx="80" cy="20" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><text  id="v-412" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,113.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Administrator</tspan></text><text  id="v-413" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-414" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,186.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Eclipse RCP Administrator Client</tspan></text><g  id="v-415" font-weight="normal" text-anchor="middle" color="#ffffff" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-416"></image></g></g><g   id="j_43" ><path  stroke="#707070" d="M 6049 3250 L 6257 3542 C 6261 3547.333333333333 6264.666666666666 3553 6268 3559 L 6487 3945 C 6490.333333333333 3951 6495.333333333333 3954.333333333333 6502 3955 L 9246 4274" id="v-457" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.580724690914709,0.8141000143483694,-0.8141000143483694,0.580724690914709,6049,3250)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-459" transform="matrix(-0.9933223666210867,-0.11537190286323255,0.11537190286323255,-0.9933223666210867,9244.845910887578,4283.803251288593)" style="opacity: 1;"></path><path  d="M 6049 3250 L 6257 3542 C 6261 3547.333333333333 6264.666666666666 3553 6268 3559 L 6487 3945 C 6490.333333333333 3951 6495.333333333333 3954.333333333333 6502 3955 L 9246 4274" id="v-458" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-451"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7456.12158203125,4065.920166015625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-454" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="189.5106964111328" height="21.00153350830078" transform="matrix(1,0,0,1,-94.8,-10.5)"></rect><text joint-selector="text" id="v-453" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >create renditions</tspan></text></g><g id="v-452"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7446.12158203125,4092.920166015625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-456" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-455" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6263, 3550)" id="v-2123"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(6492, 3954)" id="v-2124"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-461" display="none"><g  id="v-449"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-450"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-460" display="none"><g  id="v-446" transform="translate(6072.2072911872, 3282.5794664743385) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_44" ><path  stroke="#707070" d="M 9121 2612 L 9791 2946 C 9797 2948.6666666666665 9800 2953.333333333333 9800 2960 L 9800 3240 C 9800 3246.6666666666665 9797 3251.333333333333 9791 3254 L 9093 3546 C 9087 3548.6666666666665 9081 3551.6666666666665 9075 3555 L 8021 4169" id="v-474" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8952168480715577,0.4456307831925724,-0.4456307831925724,0.8952168480715577,9121,2612)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-476" transform="matrix(0.8641691134104642,-0.5032014938644082,0.5032014938644082,0.8641691134104642,8015.967895489751,4160.33807771079)" style="opacity: 1;"></path><path  d="M 9121 2612 L 9791 2946 C 9797 2948.6666666666665 9800 2953.333333333333 9800 2960 L 9800 3240 C 9800 3246.6666666666665 9797 3251.333333333333 9791 3254 L 9093 3546 C 9087 3548.6666666666665 9081 3551.6666666666665 9075 3555 L 8021 4169" id="v-475" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-468"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,9360.908203125,3433.923583984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-471" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.88777923583984" height="21.00153350830078" transform="matrix(1,0,0,1,-44.9,-10.5)"></rect><text joint-selector="text" id="v-470" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >monitor</tspan></text></g><g id="v-469"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,9350.908203125,3460.923583984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-473" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-472" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(9800, 2950)" id="v-2125"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(9800, 3250)" id="v-2126"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(9084, 3550)" id="v-2127"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-478" display="none"><g  id="v-466"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-467"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-477" display="none"><g  id="v-462" transform="translate(9156.798434305301, 2629.8457866536883) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_45" ><path  stroke="#707070" d="M 4479 3660 L 5138 3543 C 5144.825490090883 3541.891267677908 5151.158823424217 3539.5579343445747 5157 3536 L 5717 3225" id="v-491" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9846214686414055,-0.17470135514769597,0.17470135514769597,0.9846214686414055,4479,3660.080078125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-493" transform="matrix(-0.8739887697320279,0.48594611880567173,-0.48594611880567173,-0.8739887697320279,5721.859602791627,3233.8398991655135)" style="opacity: 1;"></path><path  d="M 4479 3660 L 5138 3543 C 5144.825490090883 3541.891267677908 5151.158823424217 3539.5579343445747 5157 3536 L 5717 3225" id="v-492" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-485"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5133.88037109375,3543.7314453125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-488" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.93447875976562" height="49.80153274536133" transform="matrix(1,0,0,1,-87,-24.9)"></rect><text joint-selector="text" id="v-487" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-486"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5123.88037109375,3585.7314453125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-490" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-489" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5148.238235136326, 3541.3369015168623)" id="v-2128"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-495" display="none"><g  id="v-483"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-484"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-494" display="none"><g  id="v-482" transform="translate(4518.384101363753, 3653.0076785135675) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_46" ><path  stroke="#707070" d="M 8592 1978 L 9650 2347 C 9656 2349 9662 2351.333333333333 9668 2354 L 11158 2946 C 11164 2948.6666666666665 11167 2953.333333333333 11167 2960 L 11167 3240 C 11167 3246.6666666666665 11163.666666666666 3251 11157 3253 L 10019 3547 C 10012.333333333332 3549 10006 3551 10000 3553 L 8834 3951 C 8828 3953 8822 3955 8816 3957 L 8021 4224" id="v-513" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9443595268870584,0.32891501026503933,-0.32891501026503933,0.9443595268870584,8592,1978.3699951171875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-515" transform="matrix(0.9478524376787333,-0.318709517251184,0.318709517251184,0.9478524376787333,8017.812896075701,4214.861402826975)" style="opacity: 1;"></path><path  d="M 8592 1978 L 9650 2347 C 9656 2349 9662 2351.333333333333 9668 2354 L 11158 2946 C 11164 2948.6666666666665 11167 2953.333333333333 11167 2960 L 11167 3240 C 11167 3246.6666666666665 11163.666666666666 3251 11157 3253 L 10019 3547 C 10012.333333333332 3549 10006 3551 10000 3553 L 8834 3951 C 8828 3953 8822 3955 8816 3957 L 8021 4224" id="v-514" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-507"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,11047.453125,3281.30126953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-510" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.1728515625" height="49.80153274536133" transform="matrix(1,0,0,1,-82.6,-24.9)"></rect><text joint-selector="text" id="v-509" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-508"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,11037.453125,3323.30126953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-512" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-511" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(9659, 2350)" id="v-2129"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(11167, 2950)" id="v-2130"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(11167, 3250)" id="v-2131"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(10009, 3550)" id="v-2132"><circle  idx="3" r="10"></circle><path  idx="3" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="3" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(8825, 3954)" id="v-2133"><circle  idx="4" r="10"></circle><path  idx="4" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="4" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-517" display="none"><g  id="v-505"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-506"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-516" display="none"><g  id="v-499" transform="translate(8629.768781745437, 1991.1726658450536) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_47" ><path  stroke="#707070" d="M 13075 2524 L 9060 2949 C 9053.333333333332 2949.6666666666665 9046.666666666666 2950.6666666666665 9040 2952 L 8592 3051" id="v-531" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9944410659874218,0.10529466405188817,-0.10529466405188817,-0.9944410659874218,13075,2523.820068359375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-533" transform="matrix(0.9767204284859966,-0.21451621052529107,0.21451621052529107,0.9767204284859966,8589.855211734886,3040.822782039143)" style="opacity: 1;"></path><path  d="M 13075 2524 L 9060 2949 C 9053.333333333332 2949.6666666666665 9046.666666666666 2950.6666666666665 9040 2952 L 8592 3051" id="v-532" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-525"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,10829.310546875,2761.713134765625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-528" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.57661437988281" height="49.80153274536133" transform="matrix(1,0,0,1,-56.8,-24.9)"></rect><text joint-selector="text" id="v-527" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-526"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,10819.310546875,2803.713134765625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-530" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-529" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(9050, 2950)" id="v-2134"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-535" display="none"><g  id="v-523"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-524"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-534" display="none"><g  id="v-521" transform="translate(13035.222231546053, 2528.21059815515) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_48" ><path  stroke="#707070" d="M 5717 3140 L 5058 3257 C 5051.174509909116 3258.1087323220913 5044.841176575783 3260.442065655425 5039 3264 L 4479 3575" id="v-548" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9846214221155855,0.17470161736824819,-0.17470161736824819,-0.9846214221155855,5717,3139.919921875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-550" transform="matrix(0.8739888991472765,-0.48594588604836597,0.48594588604836597,0.8739888991472765,4474.140398241793,3566.160097212761)" style="opacity: 1;"></path><path  d="M 5717 3140 L 5058 3257 C 5051.174509909116 3258.1087323220913 5044.841176575783 3260.442065655425 5039 3264 L 4479 3575" id="v-549" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-542"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5062.11962890625,3256.2685546875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-545" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.5171661376953" height="55.30594253540039" transform="matrix(1,0,0,1,-76.3,-27.7)"></rect><text joint-selector="text" id="v-544" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-26.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-543"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5052.11962890625,3298.2685546875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-547" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-546" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5047.761764863674, 3258.6630984831377)" id="v-2135"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-552" display="none"><g  id="v-540"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-541"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-551" display="none"><g  id="v-539" transform="translate(5677.615898636247, 3146.9923214864325) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_49" ><path  stroke="#707070" d="M 6642 3561 L 6633 3555 C 6627.666666666666 3551.6666666666665 6621.666666666666 3549.6666666666665 6615 3549 L 4085 3251 C 4078.333333333333 3250.333333333333 4071.6666666666665 3249 4065 3247 L 3821 3170" id="v-567" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8499026286824362,-0.5269397705228602,0.5269397705228602,-0.8499026286824362,6642,3560.5400390625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-569" transform="matrix(0.954303323979007,0.2988396992412791,-0.2988396992412791,0.954303323979007,3823.9883325026226,3160.9170560959224)" style="opacity: 1;"></path><path  d="M 6642 3561 L 6633 3555 C 6627.666666666666 3551.6666666666665 6621.666666666666 3549.6666666666665 6615 3549 L 4085 3251 C 4078.333333333333 3250.333333333333 4071.6666666666665 3249 4065 3247 L 3821 3170" id="v-568" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-558"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5227.681640625,3385.592529296875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-562" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="154.46420288085938" height="21.00153350830078" transform="matrix(1,0,0,1,-77.2,-10.5)"></rect><text joint-selector="text" id="v-561" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >consume SNC</tspan></text></g><g id="v-559"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5227.681640625,3412.592529296875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-564" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="134.66941833496094" height="23.429637908935547" transform="matrix(1,0,0,1,-67.3,-11.7)"></rect><text joint-selector="text" id="v-563" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-4.5)"><tspan dy="0" >[SAP SNC Access]</tspan></text></g><g id="v-560"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,5217.681640625,3421.842529296875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-566" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-565" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6625, 3550)" id="v-2136"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(4075, 3250)" id="v-2137"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-571" display="none"><g  id="v-556"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-557"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-570" display="none"><g  id="v-553" transform="translate(6605.027530704679, 3547.8253771343852) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_50" ><path  stroke="#707070" d="M 2230 2050 L 2469 3240 C 2470.333333333333 3246.6666666666665 2474.333333333333 3250.6666666666665 2481 3252 L 4029 3643" id="v-585" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.1968152381720382,0.9804405958666152,-0.9804405958666152,0.1968152381720382,2230.110107421875,2050)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-587" transform="matrix(-0.9695968070455628,-0.24470805415239047,0.24470805415239047,-0.9695968070455628,4026.552842607057,3652.9059880651043)" style="opacity: 1;"></path><path  d="M 2230 2050 L 2469 3240 C 2470.333333333333 3246.6666666666665 2474.333333333333 3250.6666666666665 2481 3252 L 4029 3643" id="v-586" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-579"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2657.798828125,3296.656494140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-582" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.5171661376953" height="49.80153274536133" transform="matrix(1,0,0,1,-76.3,-24.9)"></rect><text joint-selector="text" id="v-581" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >https</tspan><tspan dy="1.2em" x="0" >/nscalealinst1</tspan></text></g><g id="v-580"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2647.798828125,3338.656494140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-584" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-583" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2471, 3250)" id="v-2138"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-589" display="none"><g  id="v-577"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-578"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-588" display="none"><g  id="v-575" transform="translate(2237.876330690261, 2089.216876658623) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_51" ><path  stroke="#707070" d="M 1104 3140 L 2557 3398 C 2563.333333333333 3399.333333333333 2569.6666666666665 3400.6666666666665 2576 3402 L 4029 3660" id="v-602" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9845625081220682,0.17503333282658487,-0.17503333282658487,0.9845625081220682,1104,3140)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-604" transform="matrix(-0.9845625110354553,-0.17503331643878142,0.17503331643878142,-0.9845625110354553,4027.249588820967,3669.8457141341173)" style="opacity: 1;"></path><path  d="M 1104 3140 L 2557 3398 C 2563.333333333333 3399.333333333333 2569.6666666666665 3400.6666666666665 2576 3402 L 4029 3660" id="v-603" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-593"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2566.5,3400)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-597" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="30.17892837524414" height="21.00153350830078" transform="matrix(1,0,0,1,-15.1,-10.5)"></rect><text joint-selector="text" id="v-596" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >AC</tspan></text></g><g id="v-594"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2566.5,3427)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-599" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="240.7824249267578" height="23.429637908935547" transform="matrix(1,0,0,1,-120.4,-11.7)"></rect><text joint-selector="text" id="v-598" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-4.5)"><tspan dy="0" >[nscale Advanced Connect API]</tspan></text></g><g id="v-595"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,2556.5,3436.25)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-601" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-600" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2566.5, 3400)" id="v-2139"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-606" display="none"><g  id="v-591"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-592"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-605" display="none"><g  id="v-590" transform="translate(1143.3839526894483, 3146.993158839558) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_52" ><path  stroke="#707070" d="M 6250 2139 L 6250 2350" id="v-616" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(6.123233995736765e-17,0.9999999999999999,-0.9999999999999999,6.123233995736765e-17,6250,2139)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-618" transform="matrix(-1.8369701987210294e-16,-0.9999999999999999,0.9999999999999999,-1.8369701987210294e-16,6240,2350)" style="opacity: 1;"></path><path  d="M 6250 2139 L 6250 2350" id="v-617" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-610"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6250,2244.5)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-613" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="93.13282775878906" height="21.00153350830078" transform="matrix(1,0,0,1,-46.6,-10.5)"></rect><text joint-selector="text" id="v-612" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >discover</tspan></text></g><g id="v-611"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6240,2271.5)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-615" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-614" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-620" display="none"><g  id="v-608"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-609"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-619" display="none"><g  id="v-607" transform="translate(6250, 2179) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_53" ><path  stroke="#707070" d="M 6733 3550 L 6493 3282 C 6488.419110509902 3276.7705379639006 6483.085777176569 3273.103871297234 6477 3271 L 6167 3172" id="v-633" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.6666498342641428,-0.7453710475163298,0.7453710475163298,-0.6666498342641428,6732.83984375,3550)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-635" transform="matrix(0.9524028020531541,0.30484242264045275,-0.30484242264045275,0.9524028020531541,6170.048321987123,3162.485897362439)" style="opacity: 1;"></path><path  d="M 6733 3550 L 6493 3282 C 6488.419110509902 3276.7705379639006 6483.085777176569 3273.103871297234 6477 3271 L 6167 3172" id="v-634" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-627"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6497.90087890625,3287.472900390625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-630" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.93447875976562" height="49.80153274536133" transform="matrix(1,0,0,1,-87,-24.9)"></rect><text joint-selector="text" id="v-629" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-628"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6487.90087890625,3329.472900390625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-632" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-631" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6486.128665764853, 3274.155806945851)" id="v-2140"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-637" display="none"><g  id="v-625"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-626"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-636" display="none"><g  id="v-624" transform="translate(6706.315207874242, 3520.201982126237) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_54" ><path  stroke="#707070" d="M 13075 2613 L 11822 3245 C 11816 3248.333333333333 11809.666666666666 3250.333333333333 11803 3251 L 7092 3680" id="v-651" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8928596429383107,0.45033505083667663,-0.45033505083667663,-0.8928596429383107,13075,2613.47998046875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-653" transform="matrix(0.9958865996089789,-0.09060839210175467,0.09060839210175467,0.9958865996089789,7091.094034457893,3669.571241362428)" style="opacity: 1;"></path><path  d="M 13075 2613 L 11822 3245 C 11816 3248.333333333333 11809.666666666666 3250.333333333333 11803 3251 L 7092 3680" id="v-652" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-645"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,10156.28125,3400.955810546875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-648" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.57661437988281" height="49.80153274536133" transform="matrix(1,0,0,1,-56.8,-24.9)"></rect><text joint-selector="text" id="v-647" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-646"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,10146.28125,3442.955810546875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-650" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-649" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(11813, 3250)" id="v-2141"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-655" display="none"><g  id="v-643"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-644"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-654" display="none"><g  id="v-641" transform="translate(13039.285838600174, 2631.013846771501) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_55" ><path  stroke="#707070" d="M 13075 2535 L 9650 3065" id="v-668" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9882239319375403,0.15301457559954007,-0.15301457559954007,-0.9882239319375403,13075,2534.840087890625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-670" transform="matrix(0.9882239319375404,-0.15301457559953976,0.15301457559953976,0.9882239319375404,9648.469450862129,3055.27778924912)" style="opacity: 1;"></path><path  d="M 13075 2535 L 9650 3065" id="v-669" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-662"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,11362.5,2800)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-665" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.57661437988281" height="49.80153274536133" transform="matrix(1,0,0,1,-56.8,-24.9)"></rect><text joint-selector="text" id="v-664" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-663"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,11352.5,2842)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-667" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-666" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-672" display="none"><g  id="v-660"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-661"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-671" display="none"><g  id="v-659" transform="translate(13035.470484407746, 2541.116976135444) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_56" ><path  stroke="#707070" d="M 8367 2050 L 8367 2950" id="v-685" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(6.123233995736765e-17,0.9999999999999999,-0.9999999999999999,6.123233995736765e-17,8367,2050)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-687" transform="matrix(-1.8369701987210294e-16,-0.9999999999999999,0.9999999999999999,-1.8369701987210294e-16,8357,2950)" style="opacity: 1;"></path><path  d="M 8367 2050 L 8367 2950" id="v-686" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-679"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8367,2500)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-682" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.1728515625" height="49.80153274536133" transform="matrix(1,0,0,1,-82.6,-24.9)"></rect><text joint-selector="text" id="v-681" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-680"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8357,2542)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-684" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-683" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-689" display="none"><g  id="v-677"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-678"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-688" display="none"><g  id="v-676" transform="translate(8367, 2090) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_57" ><path  stroke="#707070" d="M 3815 2050 L 5559 3244 C 5564.333333333333 3248 5570 3251 5576 3253 L 6642 3622" id="v-703" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.825029931396585,0.5650890304188765,-0.5650890304188765,0.825029931396585,3815,2050)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-705" transform="matrix(-0.9449848618186456,-0.3271140641024092,0.3271140641024092,-0.9449848618186456,6638.729000945912,3631.5698662123355)" style="opacity: 1;"></path><path  d="M 3815 2050 L 5559 3244 C 5564.333333333333 3248 5570 3251 5576 3253 L 6642 3622" id="v-704" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-694"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5160.37451171875,2971.087890625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-698" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="107.73553466796875" height="21.00153350830078" transform="matrix(1,0,0,1,-53.9,-10.5)"></rect><text joint-selector="text" id="v-697" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >Authorize</tspan></text></g><g id="v-695"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5160.37451171875,2998.087890625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-700" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="327.7496643066406" height="24.80959415435791" transform="matrix(1,0,0,1,-163.9,-12.4)"></rect><text joint-selector="text" id="v-699" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-5.2)"><tspan dy="0" >[Single Sign On with optional Multi Factor]</tspan></text></g><g id="v-696"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,5150.37451171875,3007.337890625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-702" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-701" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5567, 3250)" id="v-2142"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-707" display="none"><g  id="v-692"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-693"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-706" display="none"><g  id="v-690" transform="translate(3848.0057901937503, 2072.596854066134) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_58" ><path  stroke="#707070" d="M 2454 1300 L 2263 1750" id="v-717" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.3891805217002526,0.9211615067560731,-0.9211615067560731,-0.3891805217002526,2453.5,1300)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-719" transform="matrix(0.3891802763800901,-0.9211616104010829,0.9211616104010829,0.3891802763800901,2254.168309647813,1746.108143418335)" style="opacity: 1;"></path><path  d="M 2454 1300 L 2263 1750" id="v-718" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-711"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2358.5,1525)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-714" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="39.589561462402344" height="21.00153350830078" transform="matrix(1,0,0,1,-19.8,-10.5)"></rect><text joint-selector="text" id="v-713" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >use</tspan></text></g><g id="v-712"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2348.5,1552)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-716" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-715" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-721" display="none"><g  id="v-709"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-710"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-720" display="none"><g  id="v-708" transform="translate(2438.3717024393445, 1336.8205963470937) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_59" ><path  stroke="#707070" d="M 9614 4450 L 9706 4547 C 9710.666666666666 4551.666666666666 9716.333333333332 4555 9723 4557 L 10788 4840" id="v-732" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.6898098520989381,0.7239905855377132,-0.7239905855377132,0.6898098520989381,9613.91015625,4450)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-734" transform="matrix(-0.9663572040148442,-0.25720372129619845,0.25720372129619845,-0.9663572040148442,10785.428448889686,4849.783460815611)" style="opacity: 1;"></path><path  d="M 9614 4450 L 9706 4547 C 9710.666666666666 4551.666666666666 9716.333333333332 4555 9723 4557 L 10788 4840" id="v-733" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-726"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,10181.267578125,4678.7744140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-729" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="130.0631561279297" height="21.00153350830078" transform="matrix(1,0,0,1,-64.6,-10.5)"></rect><text joint-selector="text" id="v-728" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-727"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,10171.267578125,4705.7744140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-731" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-730" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(9713, 4554)" id="v-2143"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-736" display="none"><g  id="v-724"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-725"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-735" display="none"><g  id="v-722" transform="translate(9641.526379366234, 4479.022378244833) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_60" ><path  stroke="#707070" d="M 2338 1166 L 1835 1331 C 1828.333333333333 1333 1822.9999999999998 1336.6666666666665 1819 1342 L 1549 1750" id="v-747" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9501399539014402,0.31182377715653564,-0.31182377715653564,-0.9501399539014402,2338,1165.6400146484375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-749" transform="matrix(0.5523211203223998,-0.83363144137311,0.83363144137311,0.5523211203223998,1541.0436726252324,1744.4767994995696)" style="opacity: 1;"></path><path  d="M 2338 1166 L 1835 1331 C 1828.333333333333 1333 1822.9999999999998 1336.6666666666665 1819 1342 L 1549 1750" id="v-748" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-741"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1844.6761474609375,1327.825927734375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-744" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="39.589561462402344" height="21.00153350830078" transform="matrix(1,0,0,1,-19.8,-10.5)"></rect><text joint-selector="text" id="v-743" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >use</tspan></text></g><g id="v-742"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1834.6761474609375,1354.825927734375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-746" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-745" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1825, 1334)" id="v-2144"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-751" display="none"><g  id="v-739"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-740"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-750" display="none"><g  id="v-737" transform="translate(2299.9926523402296, 1178.4676190136422) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_61" ><path  stroke="#707070" d="M 6128 2950 L 6222 2875 C 6226.9632145943 2870.6677834917405 6229.629881260966 2865.334450158407 6230 2859 L 6242 2650" id="v-764" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.7788282055545455,-0.6272372965893263,0.6272372965893263,0.7788282055545455,6128.25,2950)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-766" transform="matrix(-0.05568052380150746,0.9984486362698832,-0.9984486362698832,-0.05568052380150746,6251.6145337882135,2650.5566938753163)" style="opacity: 1;"></path><path  d="M 6128 2950 L 6222 2875 C 6226.9632145943 2870.6677834917405 6229.629881260966 2865.334450158407 6230 2859 L 6242 2650" id="v-765" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-758"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6232.02587890625,2823.712158203125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-761" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.93447875976562" height="49.80153274536133" transform="matrix(1,0,0,1,-87,-24.9)"></rect><text joint-selector="text" id="v-760" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-759"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6222.02587890625,2865.712158203125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-763" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-762" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6229.44482189145, 2868.501675237611)" id="v-2145"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-768" display="none"><g  id="v-756"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-757"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-767" display="none"><g  id="v-755" transform="translate(6159.267177700512, 2925.052783749592) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_62" ><path  stroke="#707070" d="M 3071 3196 L 4029 3604" id="v-781" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9199536952173462,0.3920270381694991,-0.3920270381694991,0.9199536952173462,3071,3195.8798828125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-783" transform="matrix(-0.9199536821669563,-0.39202706879430976,0.39202706879430976,-0.9199536821669563,4025.0798032431017,3613.3195145408627)" style="opacity: 1;"></path><path  d="M 3071 3196 L 4029 3604" id="v-782" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-775"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3550,3400)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-778" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.5171661376953" height="49.80153274536133" transform="matrix(1,0,0,1,-76.3,-24.9)"></rect><text joint-selector="text" id="v-777" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >https</tspan><tspan dy="1.2em" x="0" >/nscalealinst1</tspan></text></g><g id="v-776"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3540,3442)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-780" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-779" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-785" display="none"><g  id="v-773"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-774"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-784" display="none"><g  id="v-772" transform="translate(3107.8014720819097, 3211.6732782979325) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_63" ><path  stroke="#707070" d="M 1104 3120 L 2583 3251 C 2589.503333471749 3251.877082554742 2595.8366668050826 3253.2104158880757 2602 3255 L 4029 3639" id="v-799" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9960737118565915,0.08852773886320407,-0.08852773886320407,0.9960737118565915,1104,3120)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-801" transform="matrix(-0.9655527566943712,-0.26020736738205563,0.26020736738205563,-0.9655527566943712,4026.3979363149983,3649.0254235063894)" style="opacity: 1;"></path><path  d="M 1104 3120 L 2583 3251 C 2589.503333471749 3251.877082554742 2595.8366668050826 3253.2104158880757 2602 3255 L 4029 3639" id="v-800" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-790"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2589.1220703125,3251.969482421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-794" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="116.82166290283203" height="21.00153350830078" transform="matrix(1,0,0,1,-58.4,-10.5)"></rect><text joint-selector="text" id="v-793" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >CMIS REST</tspan></text></g><g id="v-791"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2589.1220703125,3278.969482421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-796" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="119.41769409179688" height="23.429637908935547" transform="matrix(1,0,0,1,-59.7,-11.7)"></rect><text joint-selector="text" id="v-795" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-4.5)"><tspan dy="0" >[cmis REST API]</tspan></text></g><g id="v-792"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,2579.1220703125,3288.219482421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-798" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-797" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2592.755000207624, 3252.315623832114)" id="v-2146"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-803" display="none"><g  id="v-788"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-789"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-802" display="none"><g  id="v-786" transform="translate(1143.8440124189513, 3123.5291180709146) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_64" ><path  stroke="#707070" d="M 1549 2050 L 2333 3242 C 2336.333333333333 3247.333333333333 2341.333333333333 3250.6666666666665 2348 3252 L 4029 3647" id="v-817" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.549546673374284,0.8354630176035668,-0.8354630176035668,0.549546673374284,1548.6700439453125,2050)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-819" transform="matrix(-0.9735097863447028,-0.22864534959428084,0.22864534959428084,-0.9735097863447028,4026.713536945629,3656.89508651564)" style="opacity: 1;"></path><path  d="M 1549 2050 L 2333 3242 C 2336.333333333333 3247.333333333333 2341.333333333333 3250.6666666666665 2348 3252 L 4029 3647" id="v-818" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-811"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2485.017578125,3284.1962890625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-814" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="135.96743774414062" height="53.148494720458984" transform="matrix(1,0,0,1,-68,-26.6)"></rect><text joint-selector="text" id="v-813" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-25)"><tspan dy="0" >https</tspan><tspan dy="1.2em" x="0" >/nscale_web</tspan></text></g><g id="v-812"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2475.017578125,3326.1962890625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-816" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-815" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2338, 3250)" id="v-2147"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-821" display="none"><g  id="v-809"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-810"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-820" display="none"><g  id="v-807" transform="translate(1570.9805404784167, 2083.419393176368) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_65" ><path  stroke="#707070" d="M 1104 3161 L 2531 3545 C 2537.163333194917 3546.789584111924 2543.4966665282504 3548.1229174452574 2550 3549 L 4029 3680" id="v-838" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9655527740187225,0.2602073030964917,-0.2602073030964917,0.9655527740187225,1104,3160.6298828125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-840" transform="matrix(-0.9960737059624986,-0.08852780518082284,0.08852780518082284,-0.9960737059624986,4028.114765648442,3689.960761205183)" style="opacity: 1;"></path><path  d="M 1104 3161 L 2531 3545 C 2537.163333194917 3546.789584111924 2543.4966665282504 3548.1229174452574 2550 3549 L 4029 3680" id="v-839" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-829"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2543.8779296875,3548.030517578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-833" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="151.21914672851562" height="26.482619285583496" transform="matrix(1,0,0,1,-75.6,-13.3)"></rect><text joint-selector="text" id="v-832" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-11.7)"><tspan dy="0" >Pipeliner DAV</tspan></text></g><g id="v-830"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2543.8779296875,3575.030517578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-835" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="235.59034729003906" height="24.817809104919434" transform="matrix(1,0,0,1,-117.8,-12.4)"></rect><text joint-selector="text" id="v-834" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-5.2)"><tspan dy="0" >[DAV Payload Dropoff Service]</tspan></text></g><g id="v-831"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,2533.8779296875,3584.280517578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-837" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-836" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2540.244999792376, 3547.684376167886)" id="v-2148"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-842" display="none"><g  id="v-827"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-828"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-841" display="none"><g  id="v-825" transform="translate(1142.6259367635555, 3171.3940852958694) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_66" ><path  stroke="#707070" d="M 9028 2650 L 9293 2950" id="v-852" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.6613321613743666,0.75009317576679,-0.75009317576679,0.6613321613743666,9028.25,2650)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-854" transform="matrix(-0.6613321613743666,-0.75009317576679,0.75009317576679,-0.6613321613743666,9285.249108606076,2956.6132768089115)" style="opacity: 1;"></path><path  d="M 9028 2650 L 9293 2950" id="v-853" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-846"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,9160.5,2800)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-849" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.88777923583984" height="21.00153350830078" transform="matrix(1,0,0,1,-44.9,-10.5)"></rect><text joint-selector="text" id="v-848" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >monitor</tspan></text></g><g id="v-847"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,9150.5,2827)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-851" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-850" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-856" display="none"><g  id="v-844"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-845"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-855" display="none"><g  id="v-843" transform="translate(9054.481386816293, 2679.978928471275) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_67" ><path  stroke="#707070" d="M 8592 1948 L 10465 2348 C 10471.666666666666 2349.333333333333 10478 2351 10484 2353 L 12087 2947 C 12093 2949 12096 2953.333333333333 12096 2960 L 12096 4544 C 12096 4550.666666666666 12092.666666666666 4555 12086 4557 L 11238 4828" id="v-872" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9779649217129797,0.20876927910716503,-0.20876927910716503,0.9779649217129797,8592,1948.030029296875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-874" transform="matrix(0.9525658260720975,-0.30433262559177304,0.30433262559177304,0.9525658260720975,11234.956406108362,4818.5943281514465)" style="opacity: 1;"></path><path  d="M 8592 1948 L 10465 2348 C 10471.666666666666 2349.333333333333 10478 2351 10484 2353 L 12087 2947 C 12093 2949 12096 2953.333333333333 12096 2960 L 12096 4544 C 12096 4550.666666666666 12092.666666666666 4555 12086 4557 L 11238 4828" id="v-873" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-866"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,11554.73046875,2749.764892578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-869" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="149.75970458984375" height="49.80153274536133" transform="matrix(1,0,0,1,-74.5,-24.9)"></rect><text joint-selector="text" id="v-868" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >mount global</tspan><tspan dy="1.2em" x="0" >Instance conf</tspan></text></g><g id="v-867"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,11544.73046875,2791.764892578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-871" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-870" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(10475, 2350)" id="v-2149"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(12096, 2950)" id="v-2150"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(12096, 4554)" id="v-2151"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-876" display="none"><g  id="v-864"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-865"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-875" display="none"><g  id="v-860" transform="translate(8631.117894266456, 1956.3540617760716) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_68" ><path  stroke="#707070" d="M 7010 3850 L 7102 3947 C 7106.666666666666 3951.6666666666665 7112.333333333333 3954.333333333333 7119 3955 L 10011 4149 C 10017.666666666666 4149.666666666666 10023 4152.666666666666 10027 4158 L 10311 4546 C 10315 4551.333333333333 10320 4555.333333333333 10326 4558 L 10788 4788" id="v-889" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.6898098520989381,0.7239905855377132,-0.7239905855377132,0.6898098520989381,7009.91015625,3850)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-891" transform="matrix(-0.8954514998741021,-0.44515908546633154,0.44515908546633154,-0.8954514998741021,10783.548822581577,4797.104348040904)" style="opacity: 1;"></path><path  d="M 7010 3850 L 7102 3947 C 7106.666666666666 3951.6666666666665 7112.333333333333 3954.333333333333 7119 3955 L 10011 4149 C 10017.666666666666 4149.666666666666 10023 4152.666666666666 10027 4158 L 10311 4546 C 10315 4551.333333333333 10320 4555.333333333333 10326 4558 L 10788 4788" id="v-890" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-883"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,9005.212890625,4081.5302734375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-886" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="130.0631561279297" height="21.00153350830078" transform="matrix(1,0,0,1,-64.6,-10.5)"></rect><text joint-selector="text" id="v-885" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-884"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8995.212890625,4108.5302734375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-888" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-887" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7109, 3954)" id="v-2152"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(10021, 4150)" id="v-2153"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(10317, 4554)" id="v-2154"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-893" display="none"><g  id="v-881"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-882"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-892" display="none"><g  id="v-877" transform="translate(7037.526379366234, 3879.022378244833) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_69" ><path  stroke="#707070" d="M 6025 2648 L 5575 2944 C 5569.666666666666 2948 5567 2953.333333333333 5567 2960 L 5567 3240 C 5567 3246.6666666666665 5569.333333333333 3252.333333333333 5574 3257 L 6181 3947 C 6185.666666666666 3951.6666666666665 6191.333333333333 3954.333333333333 6198 3955 L 8161 4149 C 8167.666666666666 4149.666666666666 8174.333333333333 4150.333333333333 8181 4151 L 9246 4274" id="v-910" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8350450478514282,0.5501815773531551,-0.5501815773531551,-0.8350450478514282,6025,2648.239990234375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-912" transform="matrix(-0.9934087626311591,-0.11462560938825644,0.11462560938825644,-0.9934087626311591,9244.853261219929,4283.973898407694)" style="opacity: 1;"></path><path  d="M 6025 2648 L 5575 2944 C 5569.666666666666 2948 5567 2953.333333333333 5567 2960 L 5567 3240 C 5567 3246.6666666666665 5569.333333333333 3252.333333333333 5574 3257 L 6181 3947 C 6185.666666666666 3951.6666666666665 6191.333333333333 3954.333333333333 6198 3955 L 8161 4149 C 8167.666666666666 4149.666666666666 8174.333333333333 4150.333333333333 8181 4151 L 9246 4274" id="v-911" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-904"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6830.14501953125,4017.473876953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-907" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="189.5106964111328" height="21.00153350830078" transform="matrix(1,0,0,1,-94.8,-10.5)"></rect><text joint-selector="text" id="v-906" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >create renditions</tspan></text></g><g id="v-905"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6820.14501953125,4044.473876953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-909" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-908" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5567, 2950)" id="v-2155"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(5567, 3250)" id="v-2156"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(6188, 3954)" id="v-2157"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(8171, 4150)" id="v-2158"><circle  idx="3" r="10"></circle><path  idx="3" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="3" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-914" display="none"><g  id="v-902"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-903"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-913" display="none"><g  id="v-897" transform="translate(5991.581522155464, 2669.9819320932947) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_70" ><path  stroke="#707070" d="M 8499 2050 L 8764 2350" id="v-927" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.6613321613743666,0.75009317576679,-0.75009317576679,0.6613321613743666,8499.25,2050)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-929" transform="matrix(-0.6613321613743666,-0.75009317576679,0.75009317576679,-0.6613321613743666,8756.249108606076,2356.6132768089115)" style="opacity: 1;"></path><path  d="M 8499 2050 L 8764 2350" id="v-928" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-921"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8631.5,2200)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-924" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.1728515625" height="49.80153274536133" transform="matrix(1,0,0,1,-82.6,-24.9)"></rect><text joint-selector="text" id="v-923" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-922"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8621.5,2242)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-926" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-925" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-931" display="none"><g  id="v-919"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-920"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-930" display="none"><g  id="v-918" transform="translate(8525.481386816293, 2079.9789284712756) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_71" ><path  stroke="#707070" d="M 10038 1934 L 6475 2466" id="v-944" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.989006689639517,0.1478707809145673,-0.1478707809145673,-0.989006689639517,10038,1933.6400146484375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-946" transform="matrix(0.9890066502591108,-0.1478710443029757,0.1478710443029757,0.9890066502591108,6473.521359773129,2456.4699915966885)" style="opacity: 1;"></path><path  d="M 10038 1934 L 6475 2466" id="v-945" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-935"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8256.5,2200)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-939" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="102.21895599365234" height="21.00153350830078" transform="matrix(1,0,0,1,-51.1,-10.5)"></rect><text joint-selector="text" id="v-938" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >consume</tspan></text></g><g id="v-936"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8256.5,2227)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-941" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="294.32568359375" height="24.793166160583496" transform="matrix(1,0,0,1,-147.2,-12.4)"></rect><text joint-selector="text" id="v-940" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-5.2)"><tspan dy="0" >[Advanced Connect Protocol Adapter]</tspan></text></g><g id="v-937"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,8246.5,2236.25)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-943" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-942" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-948" display="none"><g  id="v-933"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-934"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-947" display="none"><g  id="v-932" transform="translate(9998.43856412116, 1939.9070120369192) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_72" ><path  stroke="#707070" d="M 10567 3130 L 9660 3249 C 9653.333333333332 3249.6666666666665 9646.666666666666 3250.333333333333 9640 3251 L 5398 3549 C 5391.333333333333 3549.6666666666665 5384.666666666666 3550.333333333333 5378 3551 L 4479 3670" id="v-963" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9914833336503385,0.1302336327283059,-0.1302336327283059,-0.9914833336503385,10567,3129.550048828125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-965" transform="matrix(0.9913645150264845,-0.13113503859115255,0.13113503859115255,0.9913645150264845,4477.688578682573,3660.3264161731468)" style="opacity: 1;"></path><path  d="M 10567 3130 L 9660 3249 C 9653.333333333332 3249.6666666666665 9646.666666666666 3250.333333333333 9640 3251 L 5398 3549 C 5391.333333333333 3549.6666666666665 5384.666666666666 3550.333333333333 5378 3551 L 4479 3670" id="v-964" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-957"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7522.9560546875,3399.72216796875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-960" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.5171661376953" height="55.30594253540039" transform="matrix(1,0,0,1,-76.3,-27.7)"></rect><text joint-selector="text" id="v-959" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-26.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-958"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7512.9560546875,3441.72216796875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-962" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-961" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(9650, 3250)" id="v-2159"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(5388, 3550)" id="v-2160"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-967" display="none"><g  id="v-955"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-956"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-966" display="none"><g  id="v-952" transform="translate(10527.33989609529, 3135.203475594995) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_73" ><path  stroke="#707070" d="M 5998 3250 L 6256 3945 C 6257.999999999999 3951 6262.333333333332 3954.6666666666665 6269 3956 L 7571 4249" id="v-981" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.3479926532841141,0.937497260401481,-0.937497260401481,0.3479926532841141,5997.68017578125,3250)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-983" transform="matrix(-0.9755858761449867,-0.21961830130118556,0.21961830130118556,-0.9755858761449867,7568.803816373438,4259.105850368212)" style="opacity: 1;"></path><path  d="M 5998 3250 L 6256 3945 C 6257.999999999999 3951 6262.333333333332 3954.6666666666665 6269 3956 L 7571 4249" id="v-982" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-975"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6549.623046875,4019.15087890625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-978" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="188.86167907714844" height="21.00153350830078" transform="matrix(1,0,0,1,-94.4,-10.5)"></rect><text joint-selector="text" id="v-977" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >store documents</tspan></text></g><g id="v-976"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6539.623046875,4046.15087890625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-980" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-979" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6259, 3954)" id="v-2161"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-985" display="none"><g  id="v-973"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-974"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-984" display="none"><g  id="v-971" transform="translate(6011.92068740832, 3287.499526158071) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_74" ><path  stroke="#707070" d="M 9121 2639 L 9130 2645 C 9135.333333333332 2648.333333333333 9141.333333333332 2650.333333333333 9148 2651 L 12007 2949 C 12013.666666666666 2949.6666666666665 12017 2953.333333333333 12017 2960 L 12017 4544 C 12017 4550.666666666666 12014 4555 12008 4557 L 11238 4822" id="v-998" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8499026988487034,0.5269396573514751,-0.5269396573514751,0.8499026988487034,9121,2639.4599609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1000" transform="matrix(0.9454330528149688,-0.3258164247624238,0.3258164247624238,0.9454330528149688,11234.741606786725,4813.005493875725)" style="opacity: 1;"></path><path  d="M 9121 2639 L 9130 2645 C 9135.333333333332 2648.333333333333 9141.333333333332 2650.333333333333 9148 2651 L 12007 2949 C 12013.666666666666 2949.6666666666665 12017 2953.333333333333 12017 2960 L 12017 4544 C 12017 4550.666666666666 12014 4555 12008 4557 L 11238 4822" id="v-999" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-992"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,11772.1015625,2924.51611328125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-995" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.901123046875" height="21.00153350830078" transform="matrix(1,0,0,1,-57,-10.5)"></rect><text joint-selector="text" id="v-994" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >mount etc</tspan></text></g><g id="v-993"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,11762.1015625,2951.51611328125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-997" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-996" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(9138, 2650)" id="v-2162"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(12017, 2950)" id="v-2163"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(12017, 4554)" id="v-2164"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1002" display="none"><g  id="v-990"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-991"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1001" display="none"><g  id="v-986" transform="translate(9157.987302132282, 2652.040998963071) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_75" ><path  stroke="#707070" d="M 9121 2570 L 10332 2947 C 10338.666666666666 2949 10345 2951 10351 2953 L 10567 3025" id="v-1013" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9548316367229593,0.2971473464679675,-0.2971473464679675,0.9548316367229593,9121,2570.02001953125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1015" transform="matrix(-0.9486832817174723,-0.31622781501595787,0.31622781501595787,-0.9486832817174723,10563.837249979515,3034.4867574517093)" style="opacity: 1;"></path><path  d="M 9121 2570 L 10332 2947 C 10338.666666666666 2949 10345 2951 10351 2953 L 10567 3025" id="v-1014" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1007"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,9844.708984375,2795.300048828125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1010" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.88777923583984" height="21.00153350830078" transform="matrix(1,0,0,1,-44.9,-10.5)"></rect><text joint-selector="text" id="v-1009" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >monitor</tspan></text></g><g id="v-1008"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,9834.708984375,2822.300048828125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1012" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1011" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(10342, 2950)" id="v-2165"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1017" display="none"><g  id="v-1005"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1006"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1016" display="none"><g  id="v-1003" transform="translate(9159.192083645208, 2581.889690779722) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_76" ><path  stroke="#707070" d="M 8671 2606 L 7842 2994" id="v-1027" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9053303548107934,0.4247080746326384,-0.4247080746326384,-0.9053303548107934,8671,2605.550048828125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1029" transform="matrix(0.905330467917363,-0.42470783352856617,0.42470783352856617,0.905330467917363,7837.752839641791,2985.396654515487)" style="opacity: 1;"></path><path  d="M 8671 2606 L 7842 2994" id="v-1028" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1021"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8256.5,2800)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1024" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.88777923583984" height="21.00153350830078" transform="matrix(1,0,0,1,-44.9,-10.5)"></rect><text joint-selector="text" id="v-1023" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >monitor</tspan></text></g><g id="v-1022"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8246.5,2827)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1026" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1025" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-1031" display="none"><g  id="v-1019"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1020"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1030" display="none"><g  id="v-1018" transform="translate(8634.771676950357, 2622.9560788217873) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_77" ><path  stroke="#707070" d="M 8592 1958 L 10103 2348 C 10109.666666666666 2349.333333333333 10116 2351.6666666666665 10122 2355 L 11237 2945 C 11243 2948.333333333333 11246 2953.333333333333 11246 2960 L 11246 3240 C 11246 3246.6666666666665 11242.666666666666 3251 11236 3253 L 10119 3547 C 10112.333333333332 3549 10107.666666666666 3553 10105 3559 L 9946 3945 C 9943.333333333332 3951 9939.333333333332 3956 9934 3960 L 9675 4150" id="v-1049" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9683552404525807,0.24957589684908346,-0.24957589684908346,0.9683552404525807,8592,1957.989990234375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1051" transform="matrix(0.8059157951876613,-0.592030177496924,0.592030177496924,0.8059157951876613,9669.269563710654,4141.940733666843)" style="opacity: 1;"></path><path  d="M 8592 1958 L 10103 2348 C 10109.666666666666 2349.333333333333 10116 2351.6666666666665 10122 2355 L 11237 2945 C 11243 2948.333333333333 11246 2953.333333333333 11246 2960 L 11246 3240 C 11246 3246.6666666666665 11242.666666666666 3251 11236 3253 L 10119 3547 C 10112.333333333332 3549 10107.666666666666 3553 10105 3559 L 9946 3945 C 9943.333333333332 3951 9939.333333333332 3956 9934 3960 L 9675 4150" id="v-1050" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1043"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,10974.5498046875,2806.125244140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1046" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.1728515625" height="49.80153274536133" transform="matrix(1,0,0,1,-82.6,-24.9)"></rect><text joint-selector="text" id="v-1045" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-1044"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,10964.5498046875,2848.125244140625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1048" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1047" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(10113, 2350)" id="v-2166"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(11246, 2950)" id="v-2167"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(11246, 3250)" id="v-2168"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(10109, 3550)" id="v-2169"><circle  idx="3" r="10"></circle><path  idx="3" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="3" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(9942, 3954)" id="v-2170"><circle  idx="4" r="10"></circle><path  idx="4" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="4" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1053" display="none"><g  id="v-1041"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1042"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1052" display="none"><g  id="v-1035" transform="translate(8630.73069280042, 1967.9966712059322) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_78" ><path  stroke="#707070" d="M 6070 2139 L 5882 2343 C 5877.333333333333 2347.6666666666665 5875 2353.333333333333 5875 2360 L 5875 2640 C 5875 2646.6666666666665 5875.333333333333 2653.333333333333 5876 2660 L 5920 2950" id="v-1065" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.678957570703323,0.7341775106775212,-0.7341775106775212,-0.678957570703323,6070.1298828125,2139)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1067" transform="matrix(-0.14727628658915004,-0.9890953924715807,0.9890953924715807,-0.14727628658915004,5909.779074566176,2951.472847649982)" style="opacity: 1;"></path><path  d="M 6070 2139 L 5882 2343 C 5877.333333333333 2347.6666666666665 5875 2353.333333333333 5875 2360 L 5875 2640 C 5875 2646.6666666666665 5875.333333333333 2653.333333333333 5876 2660 L 5920 2950" id="v-1066" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1059"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5875,2508.51953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1062" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="93.13282775878906" height="21.00153350830078" transform="matrix(1,0,0,1,-46.6,-10.5)"></rect><text joint-selector="text" id="v-1061" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >discover</tspan></text></g><g id="v-1060"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5865,2535.51953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1064" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1063" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5875, 2350)" id="v-2171"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(5875, 2650)" id="v-2172"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1069" display="none"><g  id="v-1057"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1058"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1068" display="none"><g  id="v-1054" transform="translate(6042.892759365762, 2168.414239837152) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_79" ><path  stroke="#707070" d="M 9200 3175 L 8984 3247 C 8978 3249 8971.666666666666 3250.6666666666665 8965 3252 L 7092 3652" id="v-1083" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9486832817174722,0.3162278150159581,-0.3162278150159581,-0.9486832817174722,9200,3175)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1085" transform="matrix(0.9779649460373702,-0.20876916516124577,0.20876916516124577,0.9779649460373702,7089.912444044264,3642.1903664099887)" style="opacity: 1;"></path><path  d="M 9200 3175 L 8984 3247 C 8978 3249 8971.666666666666 3250.6666666666665 8965 3252 L 7092 3652" id="v-1084" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1074"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8149.44384765625,3426.171142578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1078" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="102.21895599365234" height="21.00153350830078" transform="matrix(1,0,0,1,-51.1,-10.5)"></rect><text joint-selector="text" id="v-1077" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >consume</tspan></text></g><g id="v-1075"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8149.44384765625,3453.171142578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1080" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="311.5244140625" height="24.793166160583496" transform="matrix(1,0,0,1,-155.8,-12.4)"></rect><text joint-selector="text" id="v-1079" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-5.2)"><tspan dy="0" >[Advanced Connector Protocol Adapter]</tspan></text></g><g id="v-1076"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,8139.44384765625,3462.421142578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1082" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1081" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(8975, 3250)" id="v-2173"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1087" display="none"><g  id="v-1072"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1073"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1086" display="none"><g  id="v-1070" transform="translate(9162.05266807798, 3187.649110640674) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_80" ><path  stroke="#707070" d="M 6289 2650 L 6423 3159 C 6424.400247503781 3165.393094964027 6427.0669141704475 3171.0597616306936 6431 3176 L 6742 3550" id="v-1100" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.2533580777717527,0.9673725675394161,-0.9673725675394161,0.2533580777717527,6289.27978515625,2650)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1102" transform="matrix(-0.6393841260212965,-0.7688874686142196,0.7688874686142196,-0.6393841260212965,6734.580943136571,3556.393751102605)" style="opacity: 1;"></path><path  d="M 6289 2650 L 6423 3159 C 6424.400247503781 3165.393094964027 6427.0669141704475 3171.0597616306936 6431 3176 L 6742 3550" id="v-1101" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1094"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6420.32958984375,3148.85693359375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1097" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.93447875976562" height="49.80153274536133" transform="matrix(1,0,0,1,-87,-24.9)"></rect><text joint-selector="text" id="v-1096" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-1095"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6410.32958984375,3190.85693359375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1099" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1098" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6425.100371255673, 3168.589642446041)" id="v-2174"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1104" display="none"><g  id="v-1092"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1093"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1103" display="none"><g  id="v-1091" transform="translate(6299.183472662522, 2688.681996904654) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_81" ><path  stroke="#707070" d="M 7392 3168 L 7131 3247 C 7124.333333333333 3249 7117.666666666666 3250.6666666666665 7111 3252 L 4479 3665" id="v-1118" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9571822840549183,0.2894858806425786,-0.2894858806425786,-0.9571822840549183,7392,3168.0400390625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1120" transform="matrix(0.987905269599197,-0.1550586285833126,0.1550586285833126,0.987905269599197,4477.4492672681745,3654.800928121091)" style="opacity: 1;"></path><path  d="M 7392 3168 L 7131 3247 C 7124.333333333333 3249 7117.666666666666 3250.6666666666665 7111 3252 L 4479 3665" id="v-1119" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1112"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5939.88525390625,3435.765380859375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1115" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.5171661376953" height="55.30594253540039" transform="matrix(1,0,0,1,-76.3,-27.7)"></rect><text joint-selector="text" id="v-1114" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-26.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-1113"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5929.88525390625,3477.765380859375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1117" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1116" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7121, 3250)" id="v-2175"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1122" display="none"><g  id="v-1110"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1111"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1121" display="none"><g  id="v-1108" transform="translate(7353.715324730296, 3179.5880817866155) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_82" ><path  stroke="#707070" d="M 4479 3676 L 5678 3551 C 5684.666666666666 3550.333333333333 5691.333333333333 3549.6666666666665 5698 3549 L 9940 3251 C 9946.666666666666 3250.333333333333 9953.333333333332 3249.333333333333 9960 3248 L 10567 3140" id="v-1137" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9945740500187856,-0.1040310483905156,0.1040310483905156,0.9945740500187856,4479,3676.4599609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1139" transform="matrix(-0.984498911030028,0.17539069011976882,-0.17539069011976882,-0.984498911030028,10568.754169448997,3149.9250665841028)" style="opacity: 1;"></path><path  d="M 4479 3676 L 5678 3551 C 5684.666666666666 3550.333333333333 5691.333333333333 3549.6666666666665 5698 3549 L 9940 3251 C 9946.666666666666 3250.333333333333 9953.333333333332 3249.333333333333 9960 3248 L 10567 3140" id="v-1138" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1131"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7525.30712890625,3420.6318359375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1134" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.93447875976562" height="49.80153274536133" transform="matrix(1,0,0,1,-87,-24.9)"></rect><text joint-selector="text" id="v-1133" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-1132"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7515.30712890625,3462.6318359375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1136" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1135" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5688, 3550)" id="v-2176"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(9950, 3250)" id="v-2177"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1141" display="none"><g  id="v-1129"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1130"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1140" display="none"><g  id="v-1126" transform="translate(4518.784380033288, 3671.852337361) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_83" ><path  stroke="#707070" d="M 3679 3250 L 3819 3502 C 3822.287673852317 3507.89229545307 3826.9543405189834 3512.2256287864034 3833 3515 L 4029 3601" id="v-1154" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.48513376074812226,0.8744399545894409,-0.8744399545894409,0.48513376074812226,3679.219970703125,3250)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1156" transform="matrix(-0.9153620976315917,-0.40263163092272336,0.40263163092272336,-0.9153620976315917,4024.9737402139635,3610.193609160543)" style="opacity: 1;"></path><path  d="M 3679 3250 L 3819 3502 C 3822.287673852317 3507.89229545307 3826.9543405189834 3512.2256287864034 3833 3515 L 4029 3601" id="v-1155" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1145"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3805.69189453125,3478.045654296875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1149" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="135.96743774414062" height="21.00153350830078" transform="matrix(1,0,0,1,-68,-10.5)"></rect><text joint-selector="text" id="v-1148" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >consume AL</tspan></text></g><g id="v-1146"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3805.69189453125,3505.045654296875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1151" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="209.95448303222656" height="23.429637908935547" transform="matrix(1,0,0,1,-105,-11.7)"></rect><text joint-selector="text" id="v-1150" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-4.5)"><tspan dy="0" >[SAP Archive Link Protocol]</tspan></text></g><g id="v-1147"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,3795.69189453125,3514.295654296875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1153" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1152" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(3823.9315107784755, 3510.8384431796053)" id="v-2178"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1158" display="none"><g  id="v-1143"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1144"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1157" display="none"><g  id="v-1142" transform="translate(3698.4257172471453, 3284.9662910448615) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_84" ><path  stroke="#707070" d="M 9650 3161 L 11082 3547 C 11088.666666666666 3549 11092 3553.333333333333 11092 3560 L 11092 4544 C 11092 4550.666666666666 11091.333333333332 4557.333333333333 11090 4564 L 11047 4750" id="v-1170" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.965442560990597,0.2606159270419158,-0.2606159270419158,0.965442560990597,9650,3160.739990234375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1172" transform="matrix(0.22258851374634023,-0.9749124850714525,0.9749124850714525,0.22258851374634023,11037.500575949322,4747.774216275751)" style="opacity: 1;"></path><path  d="M 9650 3161 L 11082 3547 C 11088.666666666666 3549 11092 3553.333333333333 11092 3560 L 11092 4544 C 11092 4550.666666666666 11091.333333333332 4557.333333333333 11090 4564 L 11047 4750" id="v-1171" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1164"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,10951.5205078125,3511.828857421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1167" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="130.0631561279297" height="21.00153350830078" transform="matrix(1,0,0,1,-64.6,-10.5)"></rect><text joint-selector="text" id="v-1166" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-1165"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,10941.5205078125,3538.828857421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1169" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1168" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(11092, 3550)" id="v-2179"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(11092, 4554)" id="v-2180"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1174" display="none"><g  id="v-1162"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1163"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1173" display="none"><g  id="v-1159" transform="translate(9688.621503759447, 3171.4105450077836) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_85" ><path  stroke="#707070" d="M 6642 3700 L 6006 3700 C 5999.333333333333 3700 5992.666666666666 3700 5986 3700 L 5135 3700 C 5128.333333333333 3700 5121.666666666666 3700 5115 3700 L 4479 3700" id="v-1189" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9999999999999999,1.224646799147353e-16,-1.224646799147353e-16,-0.9999999999999999,6642,3700)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1191" transform="matrix(0.9999999999999999,0,0,0.9999999999999999,4479,3690)" style="opacity: 1;"></path><path  d="M 6642 3700 L 6006 3700 C 5999.333333333333 3700 5992.666666666666 3700 5986 3700 L 5135 3700 C 5128.333333333333 3700 5121.666666666666 3700 5115 3700 L 4479 3700" id="v-1190" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1183"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5560.5,3700)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1186" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.5171661376953" height="55.30594253540039" transform="matrix(1,0,0,1,-76.3,-27.7)"></rect><text joint-selector="text" id="v-1185" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-26.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-1184"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5550.5,3742)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1188" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1187" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5996, 3700)" id="v-2181"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(5125, 3700)" id="v-2182"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1193" display="none"><g  id="v-1181"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1182"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1192" display="none"><g  id="v-1178" transform="translate(6602, 3700) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_86" ><path  stroke="#707070" d="M 2738 1182 L 3100 1330 C 3106 1332.6666666666665 3111.333333333333 1336.6666666666665 3116 1342 L 3467 1750" id="v-1207" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9253131696450734,0.3792038212905923,-0.3792038212905923,0.9253131696450734,2738,1181.9599609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1209" transform="matrix(-0.6522277740242338,-0.7580230410689326,0.7580230410689326,-0.6522277740242338,3459.359771938928,1756.5223079556192)" style="opacity: 1;"></path><path  d="M 2738 1182 L 3100 1330 C 3106 1332.6666666666665 3111.333333333333 1336.6666666666665 3116 1342 L 3467 1750" id="v-1208" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1201"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3157.400146484375,1390.123291015625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1204" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="140.510498046875" height="21.00153350830078" transform="matrix(1,0,0,1,-70.3,-10.5)"></rect><text joint-selector="text" id="v-1203" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >authenticate</tspan></text></g><g id="v-1202"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3147.400146484375,1417.123291015625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1206" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1205" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(3109, 1334)" id="v-2183"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1211" display="none"><g  id="v-1199"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1200"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1210" display="none"><g  id="v-1197" transform="translate(2775.0251358495434, 1197.1373483583768) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_87" ><path  stroke="#707070" d="M 6025 2611 L 5343 2946 C 5337 2948.6666666666665 5334 2953.333333333333 5334 2960 L 5334 3944 C 5334 3950.6666666666665 5337.333333333333 3954.333333333333 5344 3955 L 7571 4268" id="v-1226" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8975381710236409,0.44093676593763126,-0.44093676593763126,-0.8975381710236409,6025,2610.530029296875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1228" transform="matrix(-0.9902686617571999,-0.1391688813693787,0.1391688813693787,-0.9902686617571999,7569.608165772628,4278.2826566812655)" style="opacity: 1;"></path><path  d="M 6025 2611 L 5343 2946 C 5337 2948.6666666666665 5334 2953.333333333333 5334 2960 L 5334 3944 C 5334 3950.6666666666665 5337.333333333333 3954.333333333333 5344 3955 L 7571 4268" id="v-1227" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1220"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5577.0146484375,3987.749755859375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1223" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="188.86167907714844" height="21.00153350830078" transform="matrix(1,0,0,1,-94.4,-10.5)"></rect><text joint-selector="text" id="v-1222" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >store documents</tspan></text></g><g id="v-1221"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5567.0146484375,4014.749755859375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1225" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1224" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5334, 2950)" id="v-2184"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(5334, 3954)" id="v-2185"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1230" display="none"><g  id="v-1218"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1219"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1229" display="none"><g  id="v-1215" transform="translate(5989.097461464343, 2628.6354111575442) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_88" ><path  stroke="#707070" d="M 8273 2050 L 7711 2950" id="v-1243" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.5299989865422611,0.8479982749181604,-0.8479982749181604,-0.5299989865422611,8273.25,2050)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1245" transform="matrix(0.5299987607066414,-0.847998416065398,0.847998416065398,0.5299987607066414,7702.269832919779,2944.7000160848374)" style="opacity: 1;"></path><path  d="M 8273 2050 L 7711 2950" id="v-1244" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1237"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7992,2500)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1240" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.1728515625" height="49.80153274536133" transform="matrix(1,0,0,1,-82.6,-24.9)"></rect><text joint-selector="text" id="v-1239" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-1238"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7982,2542)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1242" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1241" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-1247" display="none"><g  id="v-1235"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1236"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1246" display="none"><g  id="v-1234" transform="translate(8251.813598509845, 2083.9284009628805) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_89" ><path  stroke="#707070" d="M 6025 2583 L 5034 2947 C 5028 2949 5025 2953.333333333333 5025 2960 L 5025 3944 C 5025 3950.6666666666665 5028 3955.333333333333 5034 3958 L 5496 4188" id="v-1262" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9386688358826558,0.34481997700640754,-0.34481997700640754,-0.9386688358826558,6025,2582.64990234375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1264" transform="matrix(-0.8954514998741021,-0.44515908546633154,0.44515908546633154,-0.8954514998741021,5491.548334300328,4197.104348040904)" style="opacity: 1;"></path><path  d="M 6025 2583 L 5034 2947 C 5028 2949 5025 2953.333333333333 5025 2960 L 5025 3944 C 5025 3950.6666666666665 5028 3955.333333333333 5034 3958 L 5496 4188" id="v-1263" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1256"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5025,3182.506103515625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1259" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="170.68942260742188" height="21.00153350830078" transform="matrix(1,0,0,1,-85.3,-10.5)"></rect><text joint-selector="text" id="v-1258" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >store metadata</tspan></text></g><g id="v-1257"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5015,3209.506103515625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1261" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1260" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5025, 2950)" id="v-2186"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(5025, 3954)" id="v-2187"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1266" display="none"><g  id="v-1254"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1255"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1265" display="none"><g  id="v-1251" transform="translate(5987.452709101569, 2596.7913359102213) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_90" ><path  stroke="#707070" d="M 6225 1141 L 7261 1332 C 7267.666666666666 1333.3333333333333 7274 1335.6666666666665 7280 1339 L 8142 1784" id="v-1283" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9834706406641491,0.18106766401444485,-0.18106766401444485,0.9834706406641491,6225,1141.4200439453125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1285" transform="matrix(-0.8885160499186621,-0.4588455394105268,0.4588455394105268,-0.8885160499186621,8137.411451198831,1792.6851637448544)" style="opacity: 1;"></path><path  d="M 6225 1141 L 7261 1332 C 7267.666666666666 1333.3333333333333 7274 1335.6666666666665 7280 1339 L 8142 1784" id="v-1284" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1274"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7229.9990234375,1326.2845458984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1278" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="147.97410583496094" height="55.30594253540039" transform="matrix(1,0,0,1,-74,-27.7)"></rect><text joint-selector="text" id="v-1277" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-26.1)"><tspan dy="0" >Remote</tspan><tspan dy="1.2em" x="0" >Management</tspan></text></g><g id="v-1275"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7229.9990234375,1368.2845458984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1280" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="203.139892578125" height="24.793166160583496" transform="matrix(1,0,0,1,-101.6,-12.4)"></rect><text joint-selector="text" id="v-1279" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-5.2)"><tspan dy="0" >[RMS and https Protocols]</tspan></text></g><g id="v-1276"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,7219.9990234375,1377.5345458984375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1282" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1281" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7271, 1334)" id="v-2188"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1287" display="none"><g  id="v-1272"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1273"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1286" display="none"><g  id="v-1270" transform="translate(6264.337058967757, 1148.2522956205034) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_91" ><path  stroke="#707070" d="M 5914 3250 L 5749 4150" id="v-1300" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.1811206849817038,0.9834608774484922,-0.9834608774484922,-0.1811206849817038,5914.3798828125,3250)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1302" transform="matrix(0.1811209468931712,-0.9834608292131013,0.9834608292131013,0.1811209468931712,5738.795588488937,4148.188926166949)" style="opacity: 1;"></path><path  d="M 5914 3250 L 5749 4150" id="v-1301" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1294"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5831.5,3700)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1297" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="170.68942260742188" height="21.00153350830078" transform="matrix(1,0,0,1,-85.3,-10.5)"></rect><text joint-selector="text" id="v-1296" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >store metadata</tspan></text></g><g id="v-1295"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5821.5,3727)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1299" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1298" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-1304" display="none"><g  id="v-1292"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1293"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1303" display="none"><g  id="v-1291" transform="translate(5906.786885245901, 3289.344262295082) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_92" ><path  stroke="#707070" d="M 4479 3700 L 5115 3700 C 5121.666666666666 3700 5128.333333333333 3700 5135 3700 L 5986 3700 C 5992.666666666666 3700 5999.333333333333 3700 6006 3700 L 6642 3700" id="v-1319" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9999999999999999,0,0,0.9999999999999999,4479,3700)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1321" transform="matrix(-0.9999999999999999,1.224646799147353e-16,-1.224646799147353e-16,-0.9999999999999999,6642,3710)" style="opacity: 1;"></path><path  d="M 4479 3700 L 5115 3700 C 5121.666666666666 3700 5128.333333333333 3700 5135 3700 L 5986 3700 C 5992.666666666666 3700 5999.333333333333 3700 6006 3700 L 6642 3700" id="v-1320" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1313"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5560.5,3700)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1316" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.93447875976562" height="49.80153274536133" transform="matrix(1,0,0,1,-87,-24.9)"></rect><text joint-selector="text" id="v-1315" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-1314"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5550.5,3742)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1318" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1317" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5125, 3700)" id="v-2189"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(5996, 3700)" id="v-2190"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1323" display="none"><g  id="v-1311"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1312"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1322" display="none"><g  id="v-1308" transform="translate(4519, 3700) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_93" ><path  stroke="#707070" d="M 7010 3850 L 7102 3947 C 7106.666666666666 3951.6666666666665 7112 3955.6666666666665 7118 3959 L 7571 4187" id="v-1337" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.6898098520989381,0.7239905855377132,-0.7239905855377132,0.6898098520989381,7009.91015625,3850)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1339" transform="matrix(-0.8931242972634913,-0.44980994835329574,0.44980994835329574,-0.8931242972634913,7566.501991145352,4195.611471362417)" style="opacity: 1;"></path><path  d="M 7010 3850 L 7102 3947 C 7106.666666666666 3951.6666666666665 7112 3955.6666666666665 7118 3959 L 7571 4187" id="v-1338" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1331"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7275.83154296875,4038.4384765625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1334" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="188.86167907714844" height="21.00153350830078" transform="matrix(1,0,0,1,-94.4,-10.5)"></rect><text joint-selector="text" id="v-1333" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >store documents</tspan></text></g><g id="v-1332"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7265.83154296875,4065.4384765625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1336" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1335" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7109, 3954)" id="v-2191"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1341" display="none"><g  id="v-1329"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1330"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1340" display="none"><g  id="v-1327" transform="translate(7037.526379366234, 3879.022378244833) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_94" ><path  stroke="#707070" d="M 4479 3660 L 7392 3140" id="v-1354" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9844543652967801,-0.1756405495553738,0.1756405495553738,0.9844543652967801,4479,3659.860107421875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1356" transform="matrix(-0.9844543652967801,0.17564054955537367,-0.17564054955537367,-0.9844543652967801,7393.756222586022,3149.984622532414)" style="opacity: 1;"></path><path  d="M 4479 3660 L 7392 3140" id="v-1355" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1348"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5935.5,3400)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1351" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.93447875976562" height="49.80153274536133" transform="matrix(1,0,0,1,-87,-24.9)"></rect><text joint-selector="text" id="v-1350" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-1349"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5925.5,3442)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1353" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1352" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-1358" display="none"><g  id="v-1346"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1347"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1357" display="none"><g  id="v-1345" transform="translate(4518.377520684417, 3652.970713781018) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_95" ><path  stroke="#707070" d="M 8142 3164 L 7852 3247 C 7845.333333333333 3249 7838.666666666666 3250.333333333333 7832 3251 L 4479 3672" id="v-1372" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9615275666042731,0.2747084612094518,-0.2747084612094518,-0.9615275666042731,8142,3164.2900390625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1374" transform="matrix(0.9922267599554336,-0.12444298625612432,0.12444298625612432,0.9922267599554336,4477.755665819134,3661.8578067942567)" style="opacity: 1;"></path><path  d="M 8142 3164 L 7852 3247 C 7845.333333333333 3249 7838.666666666666 3250.333333333333 7832 3251 L 4479 3672" id="v-1373" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1366"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6315.2802734375,3441.438232421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1369" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.5171661376953" height="55.30594253540039" transform="matrix(1,0,0,1,-76.3,-27.7)"></rect><text joint-selector="text" id="v-1368" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-26.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-1367"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6305.2802734375,3483.438232421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1371" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1370" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7842, 3250)" id="v-2192"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1376" display="none"><g  id="v-1364"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1365"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1375" display="none"><g  id="v-1362" transform="translate(8103.544050109405, 3175.0063580721358) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_96" ><path  stroke="#707070" d="M 8671 2500 L 8024 2500 C 8017.333333333332 2500 8010.666666666666 2500 8004 2500 L 7142 2500 C 7135.333333333332 2500 7128.666666666666 2500 7122 2500 L 6475 2500" id="v-1388" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9999999999999999,1.224646799147353e-16,-1.224646799147353e-16,-0.9999999999999999,8671,2500)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1390" transform="matrix(0.9999999999999999,0,0,0.9999999999999999,6475,2490)" style="opacity: 1;"></path><path  d="M 8671 2500 L 8024 2500 C 8017.333333333332 2500 8010.666666666666 2500 8004 2500 L 7142 2500 C 7135.333333333332 2500 7128.666666666666 2500 7122 2500 L 6475 2500" id="v-1389" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1382"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7573,2500)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1385" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.88777923583984" height="21.00153350830078" transform="matrix(1,0,0,1,-44.9,-10.5)"></rect><text joint-selector="text" id="v-1384" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >monitor</tspan></text></g><g id="v-1383"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7563,2527)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1387" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1386" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(8014, 2500)" id="v-2193"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(7132, 2500)" id="v-2194"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1392" display="none"><g  id="v-1380"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1381"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1391" display="none"><g  id="v-1377" transform="translate(8631, 2500) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_97" ><path  stroke="#707070" d="M 9121 2606 L 9204 2646 C 9210 2648.6666666666665 9216 2651 9222 2653 L 10025 2947 C 10031 2949 10034 2953.333333333333 10034 2960 L 10034 3240 C 10034 3246.6666666666665 10031.333333333332 3252 10026 3256 L 9654 3544 C 9648.666666666666 3548 9645.333333333332 3553.333333333333 9644 3560 L 9506 4150" id="v-1406" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9039238102596249,0.42769351789069876,-0.42769351789069876,0.9039238102596249,9121,2606.469970703125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1408" transform="matrix(0.22722980081522962,-0.9738411665263853,0.9738411665263853,0.22722980081522962,9496.261751264085,4147.727832407111)" style="opacity: 1;"></path><path  d="M 9121 2606 L 9204 2646 C 9210 2648.6666666666665 9216 2651 9222 2653 L 10025 2947 C 10031 2949 10034 2953.333333333333 10034 2960 L 10034 3240 C 10034 3246.6666666666665 10031.333333333332 3252 10026 3256 L 9654 3544 C 9648.666666666666 3548 9645.333333333332 3553.333333333333 9644 3560 L 9506 4150" id="v-1407" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1400"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,10034,3165.316162109375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1403" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.88777923583984" height="21.00153350830078" transform="matrix(1,0,0,1,-44.9,-10.5)"></rect><text joint-selector="text" id="v-1402" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >monitor</tspan></text></g><g id="v-1401"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,10024,3192.316162109375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1405" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1404" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(9213, 2650)" id="v-2195"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(10034, 2950)" id="v-2196"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(10034, 3250)" id="v-2197"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(9646, 3550)" id="v-2198"><circle  idx="3" r="10"></circle><path  idx="3" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="3" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1410" display="none"><g  id="v-1398"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1399"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1409" display="none"><g  id="v-1393" transform="translate(9157.03377952117, 2623.3656768776723) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_98" ><path  stroke="#707070" d="M 6064 2650 L 5970 2725 C 5965.036785405699 2729.332216508259 5962.3701187390325 2734.6655498415926 5962 2741 L 5950 2950" id="v-1423" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.7788280385111215,0.6272375040038013,-0.6272375040038013,-0.7788280385111215,6063.75,2650)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1425" transform="matrix(0.05568025789854936,-0.9984486510984683,0.9984486510984683,0.05568025789854936,5940.38546872253,2949.443308931999)" style="opacity: 1;"></path><path  d="M 6064 2650 L 5970 2725 C 5965.036785405699 2729.332216508259 5962.3701187390325 2734.6655498415926 5962 2741 L 5950 2950" id="v-1424" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1417"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,5959.97412109375,2776.287841796875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1420" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.93447875976562" height="49.80153274536133" transform="matrix(1,0,0,1,-87,-24.9)"></rect><text joint-selector="text" id="v-1419" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-1418"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,5949.97412109375,2818.287841796875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1422" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1421" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5962.55517810855, 2731.498324762389)" id="v-2199"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1427" display="none"><g  id="v-1415"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1416"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1426" display="none"><g  id="v-1414" transform="translate(6032.732822299488, 2674.947216250408) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_99" ><path  stroke="#707070" d="M 1104 3101 L 2609 3105 C 2615.673333610165 3104.7541651094853 2622.0066669434987 3105.7541651094853 2628 3108 L 4029 3618" id="v-1440" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9999964598990209,0.0026608625341731956,-0.0026608625341731956,0.9999964598990209,1104,3100.60009765625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1442" transform="matrix(-0.9396402356211093,-0.34216403610243135,0.34216403610243135,-0.9396402356211093,4025.578277620187,3627.4664802172356)" style="opacity: 1;"></path><path  d="M 1104 3101 L 2609 3105 C 2615.673333610165 3104.7541651094853 2622.0066669434987 3105.7541651094853 2628 3108 L 4029 3618" id="v-1441" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1431"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2611.640869140625,3104.968017578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1435" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="54.51677703857422" height="21.00153350830078" transform="matrix(1,0,0,1,-27.3,-10.5)"></rect><text joint-selector="text" id="v-1434" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >REST</tspan></text></g><g id="v-1432"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2611.640869140625,3131.968017578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1437" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="133.04689025878906" height="23.429637908935547" transform="matrix(1,0,0,1,-66.5,-11.7)"></rect><text joint-selector="text" id="v-1436" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-4.5)"><tspan dy="0" >[nscale REST API]</tspan></text></g><g id="v-1433"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,2601.640869140625,3141.218017578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1439" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1438" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2619.010000415248, 3104.631247664228)" id="v-2200"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1444" display="none"><g  id="v-1429"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1430"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1443" display="none"><g  id="v-1428" transform="translate(1143.9998587219548, 3101.106311916869) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_100" ><path  stroke="#707070" d="M 7430 3250 L 7055 3550" id="v-1457" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.7808688416748545,0.6246950072646417,-0.6246950072646417,-0.7808688416748545,7429.5,3250)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1459" transform="matrix(0.7808686753084833,-0.6246952152225709,0.6246952152225709,0.7808686753084833,7048.252954844689,3542.191195086641)" style="opacity: 1;"></path><path  d="M 7430 3250 L 7055 3550" id="v-1458" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1448"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7242.5,3400)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1452" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="102.21895599365234" height="21.00153350830078" transform="matrix(1,0,0,1,-51.1,-10.5)"></rect><text joint-selector="text" id="v-1451" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >consume</tspan></text></g><g id="v-1449"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7242.5,3427)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1454" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="294.32568359375" height="24.793166160583496" transform="matrix(1,0,0,1,-147.2,-12.4)"></rect><text joint-selector="text" id="v-1453" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-5.2)"><tspan dy="0" >[Advanced Connect Protocol Adapter]</tspan></text></g><g id="v-1450"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,7232.5,3436.25)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1456" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1455" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-1461" display="none"><g  id="v-1446"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1447"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1460" display="none"><g  id="v-1445" transform="translate(7398.765247622279, 3274.987801902177) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_101" ><path  stroke="#707070" d="M 8764 2650 L 8499 2950" id="v-1471" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.6613321613743663,0.7500931757667902,-0.7500931757667902,-0.6613321613743663,8763.75,2650)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1473" transform="matrix(0.6613321613743666,-0.75009317576679,0.75009317576679,0.6613321613743666,8491.749027878588,2943.386633581424)" style="opacity: 1;"></path><path  d="M 8764 2650 L 8499 2950" id="v-1472" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1465"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8631.5,2800)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1468" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.88777923583984" height="21.00153350830078" transform="matrix(1,0,0,1,-44.9,-10.5)"></rect><text joint-selector="text" id="v-1467" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >monitor</tspan></text></g><g id="v-1466"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8621.5,2827)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1470" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1469" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-1475" display="none"><g  id="v-1463"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1464"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1474" display="none"><g  id="v-1462" transform="translate(8737.518613183707, 2679.978928471275) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_102" ><path  stroke="#707070" d="M 6430 2139 L 6618 2343 C 6622.666666666666 2347.6666666666665 6625.666666666666 2353.333333333333 6627 2360 L 6840 3550" id="v-1486" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.6789576195841461,0.734177465473185,-0.734177465473185,0.6789576195841461,6429.8701171875,2139)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1488" transform="matrix(-0.1764458955294127,-0.9843103402640975,0.9843103402640975,-0.1764458955294127,6830.267058677653,3551.76454477981)" style="opacity: 1;"></path><path  d="M 6430 2139 L 6618 2343 C 6622.666666666666 2347.6666666666665 6625.666666666666 2353.333333333333 6627 2360 L 6840 3550" id="v-1487" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1480"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6707.34130859375,2808.85400390625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1483" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="93.13282775878906" height="21.00153350830078" transform="matrix(1,0,0,1,-46.6,-10.5)"></rect><text joint-selector="text" id="v-1482" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >discover</tspan></text></g><g id="v-1481"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6697.34130859375,2835.85400390625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1485" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1484" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6625, 2350)" id="v-2201"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1490" display="none"><g  id="v-1478"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1479"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1489" display="none"><g  id="v-1476" transform="translate(6457.107240634238, 2168.414239837152) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_103" ><path  stroke="#707070" d="M 3821 1951 L 6025 2449" id="v-1503" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9753855787312391,0.22050617407030945,-0.22050617407030945,0.9753855787312391,3821,1950.8699951171875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1505" transform="matrix(-0.9753855603798776,-0.2205062552455873,0.2205062552455873,-0.9753855603798776,6022.794886801343,2458.8839669843796)" style="opacity: 1;"></path><path  d="M 3821 1951 L 6025 2449" id="v-1504" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1494"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,4923,2200)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1498" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="76.25858306884766" height="26.482619285583496" transform="matrix(1,0,0,1,-38.1,-13.3)"></rect><text joint-selector="text" id="v-1497" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-11.7)"><tspan dy="0" >Import</tspan></text></g><g id="v-1495"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,4923,2227)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1500" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="455.27996826171875" height="24.793166160583496" transform="matrix(1,0,0,1,-227.6,-12.4)"></rect><text joint-selector="text" id="v-1499" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-5.2)"><tspan dy="0" >[Periodic Import of Account / Group Information via LDAP]</tspan></text></g><g id="v-1496"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,4913,2236.25)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1502" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1501" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-1507" display="none"><g  id="v-1492"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1493"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1506" display="none"><g  id="v-1491" transform="translate(3860.0164127952135, 1959.8158682268675) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_104" ><path  stroke="#707070" d="M 9200 3141 L 8602 3248 C 8595.333333333332 3249.333333333333 8588.666666666666 3250.333333333333 8582 3251 L 5398 3549 C 5391.333333333333 3549.6666666666665 5384.666666666666 3550.333333333333 5378 3551 L 4479 3670" id="v-1522" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9841720284234715,0.1772157399014812,-0.1772157399014812,-0.9841720284234715,9200,3140.52001953125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1524" transform="matrix(0.9913645150264845,-0.13113503859115255,0.13113503859115255,0.9913645150264845,4477.688578682573,3660.3264161731468)" style="opacity: 1;"></path><path  d="M 9200 3141 L 8602 3248 C 8595.333333333332 3249.333333333333 8588.666666666666 3250.333333333333 8582 3251 L 5398 3549 C 5391.333333333333 3549.6666666666665 5384.666666666666 3550.333333333333 5378 3551 L 4479 3670" id="v-1523" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1516"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6841.04443359375,3413.941162109375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1519" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.5171661376953" height="55.30594253540039" transform="matrix(1,0,0,1,-76.3,-27.7)"></rect><text joint-selector="text" id="v-1518" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-26.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-1517"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6831.04443359375,3455.941162109375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1521" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1520" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(8592, 3250)" id="v-2202"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(5388, 3550)" id="v-2203"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1526" display="none"><g  id="v-1514"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1515"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1525" display="none"><g  id="v-1511" transform="translate(9160.625341031451, 3148.045298511095) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_105" ><path  stroke="#707070" d="M 13075 2554 L 11017 3046" id="v-1539" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9725564925987767,0.23266686206670095,-0.23266686206670095,-0.9725564925987767,13075,2553.830078125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1541" transform="matrix(0.9725564925987769,-0.23266686206670065,0.23266686206670065,0.9725564925987769,11014.673352390846,3036.4443654134293)" style="opacity: 1;"></path><path  d="M 13075 2554 L 11017 3046" id="v-1540" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1533"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,12046,2800)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1536" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.57661437988281" height="49.80153274536133" transform="matrix(1,0,0,1,-56.8,-24.9)"></rect><text joint-selector="text" id="v-1535" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-1534"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,12036,2842)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1538" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1537" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-1543" display="none"><g  id="v-1531"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1532"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1542" display="none"><g  id="v-1530" transform="translate(13036.09628667421, 2563.300596188673) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_106" ><path  stroke="#707070" d="M 2570 1300 L 2574 1324 C 2574.6666666666665 1330.6666666666665 2575.6666666666665 1337.3333333333333 2577 1344 L 2823 2950" id="v-1554" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.15629071349083576,0.9877110978806127,-0.9877110978806127,0.15629071349083576,2569.6201171875,1300)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1556" transform="matrix(-0.15167748181800317,-0.9884300387530466,0.9884300387530466,-0.15167748181800317,2813.0956091962744,2951.5167978619606)" style="opacity: 1;"></path><path  d="M 2570 1300 L 2574 1324 C 2574.6666666666665 1330.6666666666665 2575.6666666666665 1337.3333333333333 2577 1344 L 2823 2950" id="v-1555" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1548"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2696.62646484375,2124.9755859375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1551" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="39.589561462402344" height="21.00153350830078" transform="matrix(1,0,0,1,-19.8,-10.5)"></rect><text joint-selector="text" id="v-1550" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >use</tspan></text></g><g id="v-1549"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2686.62646484375,2151.9755859375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1553" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1552" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2575, 1334)" id="v-2204"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1558" display="none"><g  id="v-1546"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1547"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1557" display="none"><g  id="v-1544" transform="translate(2576.152011871338, 1339.5078124999998) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_107" ><path  stroke="#707070" d="M 10995 3250 L 11392 3544 C 11397.333333333332 3548 11400 3553.333333333333 11400 3560 L 11400 4544 C 11400 4550.666666666666 11397.666666666666 4556.333333333333 11393 4561 L 11181 4750" id="v-1570" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8037889763168105,0.594914516171503,-0.594914516171503,0.8037889763168105,10994.669921875,3250)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1572" transform="matrix(0.7454999273259079,-0.6665057076702838,0.6665057076702838,0.7454999273259079,11174.104553025038,4742.545018740943)" style="opacity: 1;"></path><path  d="M 10995 3250 L 11392 3544 C 11397.333333333332 3548 11400 3553.333333333333 11400 3560 L 11400 4544 C 11400 4550.666666666666 11397.666666666666 4556.333333333333 11393 4561 L 11181 4750" id="v-1571" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1564"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,11400,3947.1484375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1567" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="130.0631561279297" height="21.00153350830078" transform="matrix(1,0,0,1,-64.6,-10.5)"></rect><text joint-selector="text" id="v-1566" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-1565"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,11390,3974.1484375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1569" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1568" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(11400, 3550)" id="v-2205"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(11400, 4554)" id="v-2206"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1574" display="none"><g  id="v-1562"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1563"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1573" display="none"><g  id="v-1559" transform="translate(11027.14515623978, 3273.805229054143) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_108" ><path  stroke="#707070" d="M 1104 3182 L 2505 3692 C 2510.993333056501 3694.2458348905143 2517.3266663898344 3695.2458348905143 2524 3695 L 4029 3699" id="v-1588" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9396402697925276,0.3421639422619305,-0.3421639422619305,0.9396402697925276,1104,3181.929931640625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1590" transform="matrix(-0.9999964601689043,-0.0026607611055455556,0.0026607611055455556,-0.9999964601689043,4028.9733569906334,3709.3998632283697)" style="opacity: 1;"></path><path  d="M 1104 3182 L 2505 3692 C 2510.993333056501 3694.2458348905143 2517.3266663898344 3695.2458348905143 2524 3695 L 4029 3699" id="v-1589" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1579"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2521.359130859375,3695.031982421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1583" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="123.96076202392578" height="21.00153350830078" transform="matrix(1,0,0,1,-62,-10.5)"></rect><text joint-selector="text" id="v-1582" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >CMIS SOAP</tspan></text></g><g id="v-1580"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2521.359130859375,3722.031982421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1585" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="124.28527069091797" height="23.429637908935547" transform="matrix(1,0,0,1,-62.1,-11.7)"></rect><text joint-selector="text" id="v-1584" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-4.5)"><tspan dy="0" >[cmis SOAP API]</tspan></text></g><g id="v-1581"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,2511.359130859375,3731.281982421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1587" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1586" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2513.989999584752, 3695.368752335772)" id="v-2207"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1592" display="none"><g  id="v-1577"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1578"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1591" display="none"><g  id="v-1575" transform="translate(1141.5870347961277, 3195.6826464996607) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_109" ><path  stroke="#707070" d="M 8142 1996 L 7326 2346 C 7320 2348.6666666666665 7314 2351.6666666666665 7308 2355 L 6167 2977" id="v-1606" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9191456414050326,0.3939178720065022,-0.3939178720065022,-0.9191456414050326,8142,1996.4300537109375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1608" transform="matrix(0.8778964763925383,-0.47885047430024036,0.47885047430024036,0.8778964763925383,6162.211339086823,2968.490985291577)" style="opacity: 1;"></path><path  d="M 8142 1996 L 7326 2346 C 7320 2348.6666666666665 7314 2351.6666666666665 7308 2355 L 6167 2977" id="v-1607" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1600"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7136.12890625,2448.693115234375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1603" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.1728515625" height="49.80153274536133" transform="matrix(1,0,0,1,-82.6,-24.9)"></rect><text joint-selector="text" id="v-1602" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-1601"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7126.12890625,2490.693115234375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1605" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1604" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7317, 2350)" id="v-2208"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1610" display="none"><g  id="v-1598"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1599"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1609" display="none"><g  id="v-1596" transform="translate(8105.238860795247, 2011.7676454922346) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_110" ><path  stroke="#707070" d="M 8592 3149 L 9040 3248 C 9046.666666666666 3249.333333333333 9053.333333333332 3250.6666666666665 9060 3252 L 10774 3548 C 10780.666666666666 3549.333333333333 10784.666666666666 3553.333333333333 10786 3560 L 10988 4750" id="v-1622" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9767204820445184,0.2145159666661745,-0.2145159666661745,0.9767204820445184,8592,3149.409912109375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1624" transform="matrix(-0.16724411414583848,-0.9859155168083995,0.9859155168083995,-0.16724411414583848,10977.700981285874,4751.672221309543)" style="opacity: 1;"></path><path  d="M 8592 3149 L 9040 3248 C 9046.666666666666 3249.333333333333 9053.333333333332 3250.6666666666665 9060 3252 L 10774 3548 C 10780.666666666666 3549.333333333333 10784.666666666666 3553.333333333333 10786 3560 L 10988 4750" id="v-1623" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1616"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,10284.5439453125,3463.47314453125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1619" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="130.0631561279297" height="21.00153350830078" transform="matrix(1,0,0,1,-64.6,-10.5)"></rect><text joint-selector="text" id="v-1618" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-1617"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,10274.5439453125,3490.47314453125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1621" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1620" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(9050, 3250)" id="v-2209"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(10784, 3550)" id="v-2210"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1626" display="none"><g  id="v-1614"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1615"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1625" display="none"><g  id="v-1611" transform="translate(8631.05771188084, 3157.6310568665253) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_111" ><path  stroke="#707070" d="M 9246 4277 L 8031 4151 C 8024.333333333333 4150.333333333333 8017.666666666666 4149.666666666666 8011 4149 L 4473 3955 C 4466.333333333333 3954.333333333333 4461 3951.333333333333 4457 3946 L 4377 3850" id="v-1641" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9946921463428091,-0.10289574337131394,0.10289574337131394,-0.9946921463428091,9246,4276.72021484375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1643" transform="matrix(0.6353662656132193,0.7722109223008385,-0.7722109223008385,0.6353662656132193,4385.152137973127,3843.6463960896094)" style="opacity: 1;"></path><path  d="M 9246 4277 L 8031 4151 C 8024.333333333333 4150.333333333333 8017.666666666666 4149.666666666666 8011 4149 L 4473 3955 C 4466.333333333333 3954.333333333333 4461 3951.333333333333 4457 3946 L 4377 3850" id="v-1642" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1635"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6790.03759765625,4082.05078125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1638" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="152.5171661376953" height="55.30594253540039" transform="matrix(1,0,0,1,-76.3,-27.7)"></rect><text joint-selector="text" id="v-1637" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-26.1)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Configuration</tspan></text></g><g id="v-1636"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6780.03759765625,4124.05078125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1640" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1639" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(8021, 4150)" id="v-2211"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(4463, 3954)" id="v-2212"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1645" display="none"><g  id="v-1633"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1634"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1644" display="none"><g  id="v-1630" transform="translate(9206.213369690813, 4272.873979079048) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_112" ><path  stroke="#707070" d="M 8021 4344 L 9086 4552 C 9092.666666666666 4553.333333333333 9099.333333333332 4554.666666666666 9106 4556 L 10788 4859" id="v-1656" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9814418399753488,0.19176004470640273,-0.19176004470640273,0.9814418399753488,8021,4343.9599609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1658" transform="matrix(-0.9840990282136074,-0.17762067072565985,0.17762067072565985,-0.9840990282136074,10786.223963262379,4869.230966520643)" style="opacity: 1;"></path><path  d="M 8021 4344 L 9086 4552 C 9092.666666666666 4553.333333333333 9099.333333333332 4554.666666666666 9106 4556 L 10788 4859" id="v-1657" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1650"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,9402.9970703125,4609.501953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1653" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.901123046875" height="21.00153350830078" transform="matrix(1,0,0,1,-57,-10.5)"></rect><text joint-selector="text" id="v-1652" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >mount etc</tspan></text></g><g id="v-1651"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,9392.9970703125,4636.501953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1655" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1654" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(9096, 4554)" id="v-2213"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1660" display="none"><g  id="v-1648"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1649"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1659" display="none"><g  id="v-1646" transform="translate(8060.25827110256, 4351.667343088575) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_113" ><path  stroke="#707070" d="M 4479 3667 L 8142 3133" id="v-1673" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.989526358038133,-0.1443523008053153,0.1443523008053153,0.989526358038133,4479,3667.179931640625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1675" transform="matrix(-0.989526319594755,0.1443525643321192,-0.1443525643321192,-0.989526319594755,8143.443769308019,3142.7151652870016)" style="opacity: 1;"></path><path  d="M 4479 3667 L 8142 3133" id="v-1674" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1667"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6310.5,3400)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1670" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.93447875976562" height="49.80153274536133" transform="matrix(1,0,0,1,-87,-24.9)"></rect><text joint-selector="text" id="v-1669" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-1668"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6300.5,3442)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1672" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1671" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-1677" display="none"><g  id="v-1665"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1666"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1676" display="none"><g  id="v-1664" transform="translate(4518.581608510604, 3661.229708177815) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_114" ><path  stroke="#707070" d="M 8592 2011 L 10567 2989" id="v-1690" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8962674572409683,0.44351397395212794,-0.44351397395212794,0.8962674572409683,8592,2011.3399658203125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1692" transform="matrix(-0.8962674129478704,-0.443514063461049,0.443514063461049,-0.8962674129478704,10562.564642869867,2997.622668279714)" style="opacity: 1;"></path><path  d="M 8592 2011 L 10567 2989" id="v-1691" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1684"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,9579.5,2500)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1687" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.1728515625" height="49.80153274536133" transform="matrix(1,0,0,1,-82.6,-24.9)"></rect><text joint-selector="text" id="v-1686" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-1685"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,9569.5,2542)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1689" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1688" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-1694" display="none"><g  id="v-1682"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1683"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1693" display="none"><g  id="v-1681" transform="translate(8627.845790845775, 2028.7504726314783) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_115" ><path  stroke="#707070" d="M 4479 3812 L 4754 3950 C 4760 3952.6666666666665 4766.333333333333 3954.333333333333 4773 3955 L 8311 4149 C 8317.666666666666 4149.666666666666 8324.333333333332 4150.333333333333 8331 4151 L 9246 4271" id="v-1709" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.894779784813658,0.4465077117909876,-0.4465077117909876,0.894779784813658,4479,3812.280029296875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1711" transform="matrix(-0.9916007126746283,-0.12933687263564425,0.12933687263564425,-0.9916007126746283,9244.70662277539,4280.565821165603)" style="opacity: 1;"></path><path  d="M 4479 3812 L 4754 3950 C 4760 3952.6666666666665 4766.333333333333 3954.333333333333 4773 3955 L 8311 4149 C 8317.666666666666 4149.666666666666 8324.333333333332 4150.333333333333 8331 4151 L 9246 4271" id="v-1710" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1703"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6849.30126953125,4068.850341796875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1706" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.93447875976562" height="49.80153274536133" transform="matrix(1,0,0,1,-87,-24.9)"></rect><text joint-selector="text" id="v-1705" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-1704"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6839.30126953125,4110.85009765625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1708" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1707" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(4763, 3954)" id="v-2214"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(8321, 4150)" id="v-2215"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1713" display="none"><g  id="v-1701"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1702"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1712" display="none"><g  id="v-1698" transform="translate(4514.751049085238, 3829.940526450047) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_116" ><path  stroke="#707070" d="M 6167 3239 L 6176 3245 C 6181.333333333332 3248.333333333333 6187.333333333332 3250.6666666666665 6194 3252 L 10236 4148 C 10242.666666666666 4149.333333333333 10247.333333333332 4153 10250 4159 L 10413 4545 C 10415.666666666666 4551 10420 4555.666666666666 10426 4559 L 10788 4769" id="v-1726" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8499026988487034,0.5269396573514751,-0.5269396573514751,0.8499026988487034,6167,3239.4599609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1728" transform="matrix(-0.8648287735463489,-0.5020669202868455,0.5020669202868455,-0.8648287735463489,10782.979181032595,4778.028331938332)" style="opacity: 1;"></path><path  d="M 6167 3239 L 6176 3245 C 6181.333333333332 3248.333333333333 6187.333333333332 3250.6666666666665 6194 3252 L 10236 4148 C 10242.666666666666 4149.333333333333 10247.333333333332 4153 10250 4159 L 10413 4545 C 10415.666666666666 4551 10420 4555.666666666666 10426 4559 L 10788 4769" id="v-1727" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1720"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8627.6279296875,3791.46826171875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1723" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="130.0631561279297" height="21.00153350830078" transform="matrix(1,0,0,1,-64.6,-10.5)"></rect><text joint-selector="text" id="v-1722" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-1721"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8617.6279296875,3818.46826171875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1725" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1724" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6184, 3250)" id="v-2216"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(10246, 4150)" id="v-2217"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(10417, 4554)" id="v-2218"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1730" display="none"><g  id="v-1718"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1719"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1729" display="none"><g  id="v-1714" transform="translate(6203.533804289335, 3254.11338165345) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_117" ><path  stroke="#707070" d="M 4479 3676 L 5678 3551 C 5684.666666666666 3550.333333333333 5691.333333333333 3549.6666666666665 5698 3549 L 8882 3251 C 8888.666666666666 3250.333333333333 8895.333333333332 3249 8902 3247 L 9200 3163" id="v-1745" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9945740500187856,-0.1040310483905156,0.1040310483905156,0.9945740500187856,4479,3676.4599609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1747" transform="matrix(-0.9626060991488119,0.2709049609761832,-0.2709049609761832,-0.9626060991488119,9202.70913403875,3172.9460641161013)" style="opacity: 1;"></path><path  d="M 4479 3676 L 5678 3551 C 5684.666666666666 3550.333333333333 5691.333333333333 3549.6666666666665 5698 3549 L 8882 3251 C 8888.666666666666 3250.333333333333 8895.333333333332 3249 8902 3247 L 9200 3163" id="v-1746" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1739"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6844.16845703125,3441.726806640625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1742" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.93447875976562" height="49.80153274536133" transform="matrix(1,0,0,1,-87,-24.9)"></rect><text joint-selector="text" id="v-1741" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >balance Layer 7</tspan><tspan dy="1.2em" x="0" >traffic</tspan></text></g><g id="v-1740"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6834.16845703125,3483.726806640625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1744" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1743" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(5688, 3550)" id="v-2219"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(8892, 3250)" id="v-2220"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1749" display="none"><g  id="v-1737"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1738"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1748" display="none"><g  id="v-1734" transform="translate(4518.784380033288, 3671.852337361) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_118" ><path  stroke="#707070" d="M 10567 3134 L 9810 3249 C 9803.333333333332 3249.6666666666665 9796.666666666666 3250.6666666666665 9790 3252 L 7092 3665" id="v-1763" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9887597896963058,0.1495128030628709,-0.1495128030628709,-0.9887597896963058,10567,3134.02001953125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1765" transform="matrix(0.9884339162690594,-0.15165221122360795,0.15165221122360795,0.9884339162690594,7090.483416068823,3655.5955618557955)" style="opacity: 1;"></path><path  d="M 10567 3134 L 9810 3249 C 9803.333333333332 3249.6666666666665 9796.666666666666 3250.6666666666665 9790 3252 L 7092 3665" id="v-1764" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1754"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8829.43359375,3399.0400390625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1758" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="102.21895599365234" height="21.00153350830078" transform="matrix(1,0,0,1,-51.1,-10.5)"></rect><text joint-selector="text" id="v-1757" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >consume</tspan></text></g><g id="v-1755"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8829.43359375,3426.0400390625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1760" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="284.26605224609375" height="24.793166160583496" transform="matrix(1,0,0,1,-142.1,-12.4)"></rect><text joint-selector="text" id="v-1759" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-5.2)"><tspan dy="0" >[Advaced Connect Protocol Adapter]</tspan></text></g><g id="v-1756"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,8819.43359375,3435.2900390625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1762" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1761" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(9800, 3250)" id="v-2221"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1767" display="none"><g  id="v-1752"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1753"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1766" display="none"><g  id="v-1750" transform="translate(10527.453727597622, 3140.0076899950773) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_119" ><path  stroke="#707070" d="M 8142 3190 L 8001 3246 C 7995 3248.6666666666665 7989 3251.333333333333 7983 3254 L 7092 3610" id="v-1781" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9284767079069659,0.371390633799834,-0.371390633799834,-0.9284767079069659,8142,3190)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1783" transform="matrix(0.9284766089996244,-0.37139088106812523,0.37139088106812523,0.9284766089996244,7088.2859930680725,3600.715275533185)" style="opacity: 1;"></path><path  d="M 8142 3190 L 8001 3246 C 7995 3248.6666666666665 7989 3251.333333333333 7983 3254 L 7092 3610" id="v-1782" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1772"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7617.087890625,3400.200439453125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1776" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="102.21895599365234" height="21.00153350830078" transform="matrix(1,0,0,1,-51.1,-10.5)"></rect><text joint-selector="text" id="v-1775" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >consume</tspan></text></g><g id="v-1773"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7617.087890625,3427.200439453125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1778" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="294.32568359375" height="24.793166160583496" transform="matrix(1,0,0,1,-147.2,-12.4)"></rect><text joint-selector="text" id="v-1777" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-5.2)"><tspan dy="0" >[Advanced Connect Protocol Adapter]</tspan></text></g><g id="v-1774"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,7607.087890625,3436.450439453125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1780" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1779" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7992, 3250)" id="v-2222"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1785" display="none"><g  id="v-1770"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1771"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1784" display="none"><g  id="v-1768" transform="translate(8104.824677468894, 3204.7646671045522) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_120" ><path  stroke="#707070" d="M 6475 2639 L 6484 2645 C 6489.333333333333 2648.333333333333 6495.333333333333 2650.333333333333 6502 2651 L 11803 2949 C 11809.666666666666 2949.6666666666665 11813 2953.333333333333 11813 2960 L 11813 4544 C 11813 4550.666666666666 11810 4555.333333333333 11804 4558 L 11238 4803" id="v-1798" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8499026988487034,0.5269396573514751,-0.5269396573514751,0.8499026988487034,6475,2639.4599609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1800" transform="matrix(0.9178329176409085,-0.39696691964794384,0.39696691964794384,0.9178329176409085,11234.030712564612,4793.5115548638205)" style="opacity: 1;"></path><path  d="M 6475 2639 L 6484 2645 C 6489.333333333333 2648.333333333333 6495.333333333333 2650.333333333333 6502 2651 L 11803 2949 C 11809.666666666666 2949.6666666666665 11813 2953.333333333333 11813 2960 L 11813 4544 C 11813 4550.666666666666 11810 4555.333333333333 11804 4558 L 11238 4803" id="v-1799" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1792"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,10253.3798828125,2861.88671875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1795" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="130.0631561279297" height="21.00153350830078" transform="matrix(1,0,0,1,-64.6,-10.5)"></rect><text joint-selector="text" id="v-1794" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-1793"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,10243.3798828125,2888.88671875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1797" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1796" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6492, 2650)" id="v-2223"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(11813, 2950)" id="v-2224"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(11813, 4554)" id="v-2225"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1802" display="none"><g  id="v-1790"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1791"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1801" display="none"><g  id="v-1786" transform="translate(6512.025579395488, 2651.563596049775) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_121" ><path  stroke="#707070" d="M 6828 3550 L 6694 3041 C 6692.599752496218 3034.6069050359724 6689.933085829551 3028.940238369306 6686 3024 L 6375 2650" id="v-1815" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.2533580777717532,-0.967372567539416,0.967372567539416,-0.2533580777717532,6827.72021484375,3550)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1817" transform="matrix(0.6393841772130747,0.7688874260446448,-0.7688874260446448,0.6393841772130747,6382.419055925816,2643.606248811173)" style="opacity: 1;"></path><path  d="M 6828 3550 L 6694 3041 C 6692.599752496218 3034.6069050359724 6689.933085829551 3028.940238369306 6686 3024 L 6375 2650" id="v-1816" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1809"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6696.67041015625,3051.14306640625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1812" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.93447875976562" height="49.80153274536133" transform="matrix(1,0,0,1,-87,-24.9)"></rect><text joint-selector="text" id="v-1811" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-1810"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6686.67041015625,3093.14306640625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1814" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1813" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6691.899628744327, 3031.410357553959)" id="v-2226"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1819" display="none"><g  id="v-1807"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1808"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1818" display="none"><g  id="v-1806" transform="translate(6817.816527337478, 3511.318003095346) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_122" ><path  stroke="#707070" d="M 13075 2650 L 12183 3244 C 12177.666666666666 3248 12172 3251.333333333333 12166 3254 L 9696 4213" id="v-1833" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8320503335416465,0.5547001374195202,-0.5547001374195202,-0.8320503335416465,13075,2650)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1835" transform="matrix(0.9321855526631572,-0.3619807942503082,0.3619807942503082,0.9321855526631572,9692.380602155865,4203.308206322122)" style="opacity: 1;"></path><path  d="M 13075 2650 L 12183 3244 C 12177.666666666666 3248 12172 3251.333333333333 12166 3254 L 9696 4213" id="v-1834" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1827"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,11439.7236328125,3535.983642578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1830" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.57661437988281" height="49.80153274536133" transform="matrix(1,0,0,1,-56.8,-24.9)"></rect><text joint-selector="text" id="v-1829" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-1828"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,11429.7236328125,3577.983642578125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1832" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1831" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(12175, 3250)" id="v-2227"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1837" display="none"><g  id="v-1825"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1826"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1836" display="none"><g  id="v-1823" transform="translate(13041.70650821017, 2672.1707781649757) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_123" ><path  stroke="#707070" d="M 8671 2546 L 6167 3054" id="v-1847" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9799892166254238,0.19905058477152965,-0.19905058477152965,-0.9799892166254238,8671,2545.699951171875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1849" transform="matrix(0.9799892166254239,-0.19905058477152937,0.19905058477152937,0.9799892166254239,6165.00940667353,3044.500183993961)" style="opacity: 1;"></path><path  d="M 8671 2546 L 6167 3054" id="v-1848" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1841"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7419,2800)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1844" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.88777923583984" height="21.00153350830078" transform="matrix(1,0,0,1,-44.9,-10.5)"></rect><text joint-selector="text" id="v-1843" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >monitor</tspan></text></g><g id="v-1842"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7409,2827)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1846" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1845" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-1851" display="none"><g  id="v-1839"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1840"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1850" display="none"><g  id="v-1838" transform="translate(8631.798599581993, 2553.9529997653144) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_124" ><path  stroke="#707070" d="M 6076 3250 L 6316 3518 C 6320.580889490097 3523.229462036099 6325.9142228234305 3526.896128702766 6332 3529 L 6642 3628" id="v-1864" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.6666498342641428,0.7453710475163297,-0.7453710475163297,0.6666498342641428,6076.16015625,3250)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1866" transform="matrix(-0.95240278175704,-0.3048424860505041,0.3048424860505041,-0.95240278175704,6638.951677175815,3637.5141030687005)" style="opacity: 1;"></path><path  d="M 6076 3250 L 6316 3518 C 6320.580889490097 3523.229462036099 6325.9142228234305 3526.896128702766 6332 3529 L 6642 3628" id="v-1865" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1858"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6311.09912109375,3512.527099609375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1861" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="173.93447875976562" height="49.80153274536133" transform="matrix(1,0,0,1,-87,-24.9)"></rect><text joint-selector="text" id="v-1860" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-1859"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6301.09912109375,3554.527099609375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1863" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1862" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6322.871334235147, 3525.844193054149)" id="v-2228"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1868" display="none"><g  id="v-1856"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1857"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1867" display="none"><g  id="v-1855" transform="translate(6102.684792125758, 3279.7980178737625) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_125" ><path  stroke="#707070" d="M 13075 2523 L 11823 2649 C 11816.333333333332 2649.6666666666665 11809.666666666666 2650.333333333333 11803 2651 L 8002 2949 C 7995.333333333333 2949.6666666666665 7989 2951.333333333333 7983 2954 L 7842 3010" id="v-1883" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9949509464192888,0.10036241437590673,-0.10036241437590673,-0.9949509464192888,13075,2522.699951171875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1885" transform="matrix(0.9284766089996244,-0.37139088106812523,0.37139088106812523,0.9284766089996244,7838.2859930680725,3000.715275533185)" style="opacity: 1;"></path><path  d="M 13075 2523 L 11823 2649 C 11816.333333333332 2649.6666666666665 11809.666666666666 2650.333333333333 11803 2651 L 8002 2949 C 7995.333333333333 2949.6666666666665 7989 2951.333333333333 7983 2954 L 7842 3010" id="v-1884" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1877"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,10454.298828125,2756.73876953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1880" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.57661437988281" height="49.80153274536133" transform="matrix(1,0,0,1,-56.8,-24.9)"></rect><text joint-selector="text" id="v-1879" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-1878"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,10444.298828125,2798.73876953125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1882" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1881" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(11813, 2650)" id="v-2229"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(7992, 2950)" id="v-2230"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1887" display="none"><g  id="v-1875"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1876"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1886" display="none"><g  id="v-1872" transform="translate(13035.201038241605, 2527.005326822331) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_126" ><path  stroke="#707070" d="M 1746 431 L 5775 1065" id="v-1897" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9878740644459034,0.15525731156738123,-0.15525731156738123,0.9878740644459034,1746,431.42999267578125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1899" transform="matrix(-0.9878740721985627,-0.15525726223861033,0.15525726223861033,-0.9878740721985627,5773.447261849599,1074.5187156881218)" style="opacity: 1;"></path><path  d="M 1746 431 L 5775 1065" id="v-1898" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1891"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3760.5,748)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1894" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="39.589561462402344" height="21.00153350830078" transform="matrix(1,0,0,1,-19.8,-10.5)"></rect><text joint-selector="text" id="v-1893" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >use</tspan></text></g><g id="v-1892"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3750.5,775)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1896" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1895" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-1901" display="none"><g  id="v-1889"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1890"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1900" display="none"><g  id="v-1888" transform="translate(1785.5137734956127, 437.21785366001944) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_127" ><path  stroke="#707070" d="M 13075 2523 L 11823 2649 C 11816.333333333332 2649.6666666666665 11809.666666666666 2650.333333333333 11803 2651 L 6167 3083" id="v-1915" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9949509464192888,0.10036241437590673,-0.10036241437590673,-0.9949509464192888,13075,2522.699951171875)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1917" transform="matrix(0.9970754771945571,-0.07642311677264899,0.07642311677264899,0.9970754771945571,6166.235717185328,3072.779316239531)" style="opacity: 1;"></path><path  d="M 13075 2523 L 11823 2649 C 11816.333333333332 2649.6666666666665 11809.666666666666 2650.333333333333 11803 2651 L 6167 3083" id="v-1916" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1909"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,9622.3427734375,2818.147705078125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1912" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="113.57661437988281" height="49.80153274536133" transform="matrix(1,0,0,1,-56.8,-24.9)"></rect><text joint-selector="text" id="v-1911" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >Provide</tspan><tspan dy="1.2em" x="0" >Certificate</tspan></text></g><g id="v-1910"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,9612.3427734375,2860.147705078125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1914" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1913" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(11813, 2650)" id="v-2231"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1919" display="none"><g  id="v-1907"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1908"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1918" display="none"><g  id="v-1905" transform="translate(13035.201038241605, 2527.005326822331) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_128" ><path  stroke="#707070" d="M 8865 2650 L 8744 3240 C 8742.666666666666 3246.6666666666665 8738.666666666666 3250.6666666666665 8732 3252 L 7092 3646" id="v-1930" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.20113698325828433,0.9795631240332378,-0.9795631240332378,-0.20113698325828433,8865.2001953125,2650)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1932" transform="matrix(0.972387325367318,-0.2333728550302999,0.2333728550302999,0.972387325367318,7089.6660310085235,3636.276115062255)" style="opacity: 1;"></path><path  d="M 8865 2650 L 8744 3240 C 8742.666666666666 3246.6666666666665 8738.666666666666 3250.6666666666665 8732 3252 L 7092 3646" id="v-1931" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1924"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8213.6328125,3376.53466796875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1927" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="89.88777923583984" height="21.00153350830078" transform="matrix(1,0,0,1,-44.9,-10.5)"></rect><text joint-selector="text" id="v-1926" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >monitor</tspan></text></g><g id="v-1925"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8203.6328125,3403.53466796875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1929" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1928" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(8742, 3250)" id="v-2232"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1934" display="none"><g  id="v-1922"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1923"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1933" display="none"><g  id="v-1920" transform="translate(8856.96386842729, 2689.1844432057687) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_129" ><path  stroke="#707070" d="M 3821 3199 L 4017 3285 C 4023.045659481016 3287.774371213596 4027.7123261476827 3292.107704546929 4031 3298 L 4171 3550" id="v-1947" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9153620574213537,0.40263172233859823,-0.40263172233859823,0.9153620574213537,3821,3198.9599609375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1949" transform="matrix(-0.4851338189674832,-0.8744399222897048,0.8744399222897048,-0.4851338189674832,4162.035649904278,3554.851352646947)" style="opacity: 1;"></path><path  d="M 3821 3199 L 4017 3285 C 4023.045659481016 3287.774371213596 4027.7123261476827 3292.107704546929 4031 3298 L 4171 3550" id="v-1948" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1938"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,4044.30810546875,3321.954345703125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1942" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="148.94761657714844" height="21.00153350830078" transform="matrix(1,0,0,1,-74.5,-10.5)"></rect><text joint-selector="text" id="v-1941" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >consume ILM</tspan></text></g><g id="v-1939"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,4044.30810546875,3348.954345703125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1944" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="388.1075134277344" height="24.817809104919434" transform="matrix(1,0,0,1,-194.1,-12.4)"></rect><text joint-selector="text" id="v-1943" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-5.2)"><tspan dy="0" >[SAP Information Lifecycle Management Protocol]</tspan></text></g><g id="v-1940"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,4034.30810546875,3358.204345703125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1946" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1945" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(4026.0684892215245, 3289.1615568203947)" id="v-2233"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1951" display="none"><g  id="v-1936"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1937"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1950" display="none"><g  id="v-1935" transform="translate(3857.6291159197917, 3215.0719590260314) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_130" ><path  stroke="#707070" d="M 10567 3229 L 10018 3545 C 10012 3548.333333333333 10007 3552.6666666666665 10003 3558 L 9579 4150" id="v-1965" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8670137355869596,0.49828423846590353,-0.49828423846590353,-0.8670137355869596,10567,3229.31005859375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1967" transform="matrix(0.5828768049773331,-0.8125605394180889,0.8125605394180889,0.5828768049773331,9570.474337493546,4144.171349063157)" style="opacity: 1;"></path><path  d="M 10567 3229 L 10018 3545 C 10012 3548.333333333333 10007 3552.6666666666665 10003 3558 L 9579 4150" id="v-1966" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1959"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,9981.2431640625,3588.377685546875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1962" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="189.5106964111328" height="21.00153350830078" transform="matrix(1,0,0,1,-94.8,-10.5)"></rect><text joint-selector="text" id="v-1961" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >create renditions</tspan></text></g><g id="v-1960"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,9971.2431640625,3615.377685546875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1964" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1963" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(10009, 3550)" id="v-2234"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1969" display="none"><g  id="v-1957"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1958"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1968" display="none"><g  id="v-1955" transform="translate(10532.332619685903, 3248.9542662645804) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_131" ><path  stroke="#707070" d="M 1366 600 L 207 1889 C 202.33333333333331 1893.6666666666665 199.99999999999997 1899.3333333333333 200 1906 L 200 3694 C 199.99999999999997 3700.666666666666 203.33333333333331 3704.666666666666 210 3706 L 4603 4552 C 4609.666666666666 4553.333333333333 4616.333333333333 4554.333333333333 4623 4555 L 10788 4888" id="v-1982" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.668853879798775,0.7433938979290357,-0.7433938979290357,-0.668853879798775,1366.050048828125,600)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-1984" transform="matrix(-0.9985417872207303,-0.053984249314310326,0.053984249314310326,-0.9985417872207303,10787.460223816564,4897.825553334101)" style="opacity: 1;"></path><path  d="M 1366 600 L 207 1889 C 202.33333333333331 1893.6666666666665 199.99999999999997 1899.3333333333333 200 1906 L 200 3694 C 199.99999999999997 3700.666666666666 203.33333333333331 3704.666666666666 210 3706 L 4603 4552 C 4609.666666666666 4553.333333333333 4616.333333333333 4554.333333333333 4623 4555 L 10788 4888" id="v-1983" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1976"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,3701.046142578125,4378.302734375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1979" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="74.31155395507812" height="21.00153350830078" transform="matrix(1,0,0,1,-37.2,-10.5)"></rect><text joint-selector="text" id="v-1978" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >mount</tspan></text></g><g id="v-1977"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,3691.046142578125,4405.302734375)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1981" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1980" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(200, 1896)" id="v-2235"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(200, 3704)" id="v-2236"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(4613, 4554)" id="v-2237"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-1986" display="none"><g  id="v-1974"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1975"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-1985" display="none"><g  id="v-1970" transform="translate(1339.2554375266566, 629.7443839759617) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_132" ><path  stroke="#707070" d="M 8186 2050 L 7833 2344 C 7827.666666666666 2348 7822.666666666666 2352.333333333333 7818 2357 L 7249 2943 C 7244.333333333333 2947.6666666666665 7240.666666666666 2953 7238 2959 L 6942 3550" id="v-2001" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.7693807060630379,0.6387905205448348,-0.6387905205448348,-0.7693807060630379,8186.330078125,2050)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2003" transform="matrix(0.4472137875035034,-0.8944270949981172,0.8944270949981172,0.4472137875035034,6933.055759143734,3545.527797137446)" style="opacity: 1;"></path><path  d="M 8186 2050 L 7833 2344 C 7827.666666666666 2348 7822.666666666666 2352.333333333333 7818 2357 L 7249 2943 C 7244.333333333333 2947.6666666666665 7240.666666666666 2953 7238 2959 L 6942 3550" id="v-2002" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-1995"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7463.40380859375,2722.190673828125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-1998" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.1728515625" height="49.80153274536133" transform="matrix(1,0,0,1,-82.6,-24.9)"></rect><text joint-selector="text" id="v-1997" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-1996"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7453.40380859375,2764.190673828125)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2000" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-1999" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7825, 2350)" id="v-2238"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(7242, 2950)" id="v-2239"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2005" display="none"><g  id="v-1993"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-1994"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2004" display="none"><g  id="v-1990" transform="translate(8155.264013060023, 2075.5988106525588) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_133" ><path  stroke="#707070" d="M 10488 1944 L 12532 2348 C 12538.666666666664 2349.333333333333 12542.666666666664 2353.333333333333 12544 2360 L 12632 2940 C 12633.333333333332 2946.6666666666665 12634 2953.333333333333 12634 2960 L 12634 4544 C 12634 4550.666666666666 12630.666666666666 4554.666666666666 12624 4556 L 11238 4852" id="v-2018" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9810581208665837,0.19371361201972206,-0.19371361201972206,0.9810581208665837,10488,1944.4300537109375)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2020" transform="matrix(0.9779703943662871,-0.20874364120386693,0.20874364120386693,0.9779703943662871,11235.912156519298,4842.190056687125)" style="opacity: 1;"></path><path  d="M 10488 1944 L 12532 2348 C 12538.666666666664 2349.333333333333 12542.666666666664 2353.333333333333 12544 2360 L 12632 2940 C 12633.333333333332 2946.6666666666665 12634 2953.333333333333 12634 2960 L 12634 4544 C 12634 4550.666666666666 12630.666666666666 4554.666666666666 12624 4556 L 11238 4852" id="v-2019" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2012"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,12634,3115.006591796875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2015" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="130.1263427734375" height="26.482619285583496" transform="matrix(1,0,0,1,-65.1,-13.3)"></rect><text joint-selector="text" id="v-2014" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-11.7)"><tspan dy="0" >mount pool</tspan></text></g><g id="v-2013"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,12624,3142.006591796875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2017" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2016" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(12542, 2350)" id="v-2240"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(12634, 2950)" id="v-2241"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(12634, 4554)" id="v-2242"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2022" display="none"><g  id="v-2010"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2011"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2021" display="none"><g  id="v-2006" transform="translate(10527.240848237458, 1951.7560189275605) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_134" ><path  stroke="#707070" d="M 6724 3850 L 6632 3947 C 6627.333333333332 3951.6666666666665 6621.999999999999 3955.333333333333 6616 3958 L 5946 4214" id="v-2036" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.6898099485041099,0.7239904936839688,-0.7239904936839688,-0.6898099485041099,6724.08984375,3850)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2038" transform="matrix(0.9339313845879861,-0.35745233092199447,0.35745233092199447,0.9339313845879861,5942.42551831365,4204.54087352584)" style="opacity: 1;"></path><path  d="M 6724 3850 L 6632 3947 C 6627.333333333332 3951.6666666666665 6621.999999999999 3955.333333333333 6616 3958 L 5946 4214" id="v-2037" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2030"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,6352.56201171875,4058.656982421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2033" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="170.68942260742188" height="21.00153350830078" transform="matrix(1,0,0,1,-85.3,-10.5)"></rect><text joint-selector="text" id="v-2032" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >store metadata</tspan></text></g><g id="v-2031"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,6342.56201171875,4085.656982421875)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2035" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2034" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(6625, 3954)" id="v-2243"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2040" display="none"><g  id="v-2028"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2029"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2039" display="none"><g  id="v-2026" transform="translate(6696.473620633766, 3879.022378244833) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_135" ><path  stroke="#707070" d="M 7842 3190 L 7983 3246 C 7989 3248.6666666666665 7995.333333333333 3250.333333333333 8002 3251 L 10465 3549 C 10471.666666666666 3549.6666666666665 10476 3553 10478 3559 L 10810 4545 C 10812 4551 10814.666666666666 4557 10818 4563 L 10926 4750" id="v-2053" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9284766955435518,0.37139066470837195,-0.37139066470837195,0.9284766955435518,7842,3190)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2055" transform="matrix(-0.5004284614183884,-0.8657778901094808,0.8657778901094808,-0.5004284614183884,10917.632638525589,4755.0043486715285)" style="opacity: 1;"></path><path  d="M 7842 3190 L 7983 3246 C 7989 3248.6666666666665 7995.333333333333 3250.333333333333 8002 3251 L 10465 3549 C 10471.666666666666 3549.6666666666665 10476 3553 10478 3559 L 10810 4545 C 10812 4551 10814.666666666666 4557 10818 4563 L 10926 4750" id="v-2054" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2047"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,9790.490234375,3467.390625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2050" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="130.0631561279297" height="21.00153350830078" transform="matrix(1,0,0,1,-64.6,-10.5)"></rect><text joint-selector="text" id="v-2049" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >mount conf</tspan></text></g><g id="v-2048"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,9780.490234375,3494.390625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2052" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2051" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7992, 3250)" id="v-2244"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(10475, 3550)" id="v-2245"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(10813, 4554)" id="v-2246"><circle  idx="2" r="10"></circle><path  idx="2" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="2" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2057" display="none"><g  id="v-2045"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2046"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2056" display="none"><g  id="v-2041" transform="translate(7879.175322531106, 3204.7646671045522) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_136" ><path  stroke="#707070" d="M 8142 1964 L 6475 2436" id="v-2070" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.9621049941447484,0.2726792625810285,-0.2726792625810285,-0.9621049941447484,8142,1963.77001953125)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2072" transform="matrix(0.9621049941447484,-0.2726792625810286,0.2726792625810286,0.9621049941447484,6472.273251182743,2426.6089165124877)" style="opacity: 1;"></path><path  d="M 8142 1964 L 6475 2436" id="v-2071" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2064"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,7308.5,2200)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2067" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="165.1728515625" height="49.80153274536133" transform="matrix(1,0,0,1,-82.6,-24.9)"></rect><text joint-selector="text" id="v-2066" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-23.3)"><tspan dy="0" >remote</tspan><tspan dy="1.2em" x="0" >Administration</tspan></text></g><g id="v-2065"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,7298.5,2242)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2069" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2068" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2074" display="none"><g  id="v-2062"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2063"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2073" display="none"><g  id="v-2061" transform="translate(8103.513014009302, 1974.8973349655723) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_137" ><path  stroke="#707070" d="M 7010 3850 L 7102 3947 C 7106.666666666666 3951.6666666666665 7112.333333333333 3954.333333333333 7119 3955 L 9246 4267" id="v-2088" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.6898098520989381,0.7239905855377132,-0.7239905855377132,0.6898098520989381,7009.91015625,3850)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2090" transform="matrix(-0.9894406092842908,-0.144938886083519,0.144938886083519,-0.9894406092842908,9244.550485982008,4276.934615266178)" style="opacity: 1;"></path><path  d="M 7010 3850 L 7102 3947 C 7106.666666666666 3951.6666666666665 7112.333333333333 3954.333333333333 7119 3955 L 9246 4267" id="v-2089" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2082"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,8106.87744140625,4099.9072265625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2085" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="189.5106964111328" height="21.00153350830078" transform="matrix(1,0,0,1,-94.8,-10.5)"></rect><text joint-selector="text" id="v-2084" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.9)"><tspan dy="0" >create renditions</tspan></text></g><g id="v-2083"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,8096.87744140625,4126.9072265625)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2087" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2086" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(7109, 3954)" id="v-2247"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2092" display="none"><g  id="v-2080"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2081"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2091" display="none"><g  id="v-2078" transform="translate(7037.526379366234, 3879.022378244833) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g></g><g ></g><g ></g><g ></g></g></svg>
\ No newline at end of file
diff --git a/dsl/export/sl_nappl-key.svg b/dsl/export/sl_nappl-key.svg
new file mode 100644
index 0000000..525c370
--- /dev/null
+++ b/dsl/export/sl_nappl-key.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 2500 500" style="background: #ffffff"><g transform="translate(25,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#dddddd" stroke-width="2" stroke="#c7c7c7"/><text x="225" y="131.25" text-anchor="middle" fill="#000000" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Element</tspan></text></g><g transform="translate(525,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#11a63c" stroke-width="2" stroke="#0f9536"/><text x="225" y="131.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">nscale</tspan></text></g><g transform="translate(1025,170)"><path d="M390,0 L390,60 L450,30 L 390,0" style="fill:#707070" stroke-dasharray="" /><path d="M0,30 L390,30" style="stroke:#707070; stroke-width: 6; fill: none; stroke-dasharray: 30 30;" /><text x="225" y="76.25" text-anchor="middle" fill="#707070" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Relationship</tspan></text></g></svg>
\ No newline at end of file
diff --git a/dsl/export/sl_nappl.svg b/dsl/export/sl_nappl.svg
new file mode 100644
index 0000000..e3a5eb6
--- /dev/null
+++ b/dsl/export/sl_nappl.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 3330 1853" style="background: #ffffff"><defs joint-selector="defs"></defs><g joint-selector="layers"  transform="matrix(1,0,0,1,0,0)"><g ></g><g ><g   id="j_161"  transform="translate(20,1808)"><g id="v-2490"><text  id="v-2491" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >Tuesday, December 19, 2023 at 8:42 AM Central European Standard Time</tspan></text></g></g><g   id="j_160"  transform="translate(20,1777)"><g id="v-2488"><text  id="v-2489" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >the Application Layer Cluster and peripheral services</tspan></text></g></g><g   id="j_159"  transform="translate(20,1733)"><g id="v-2486"><text  id="v-2487" font-size="36px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#000000" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >nscale Application Layer</tspan></text></g></g><g   id="j_142"  transform="translate(1020,451)" style=""><g id="v-2261"><rect  id="v-2262" width="2110" height="1202" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-2263" font-size="24px" xml:space="preserve" y="1187" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Kubernetes Cluster</tspan></text><text  id="v-2264" font-size="17px" xml:space="preserve" display="none" y="1187" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-2265" pointer-events="visible"></image></g></g><g   id="j_143"  transform="translate(1040,471)" style=""><g id="v-2266"><rect  id="v-2267" width="2070" height="1108" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-2268" font-size="24px" xml:space="preserve" y="1093" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Namespace</tspan></text><text  id="v-2269" font-size="17px" xml:space="preserve" display="none" y="1093" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-2270" pointer-events="visible"></image></g></g><g   id="j_144"  transform="translate(1060,491)" style=""><g id="v-2271"><rect  id="v-2272" width="2030" height="1014" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-2273" font-size="24px" xml:space="preserve" y="999" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >Instance</tspan></text><text  id="v-2274" font-size="17px" xml:space="preserve" display="none" y="999" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-2275" pointer-events="visible"></image></g></g><g   id="j_145"  transform="translate(1080,511)" style=""><g id="v-2276"><rect  id="v-2277" width="1990" height="394" rx="0" ry="0" fill="#ffffff" stroke="#ff00ff" stroke-width="1" stroke-dasharray="5,5" pointer-events="none"></rect><text  id="v-2278" font-size="24px" xml:space="preserve" y="379" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" >nscale Application Layer Cluster</tspan></text><text  id="v-2279" font-size="17px" xml:space="preserve" display="none" y="379" font-weight="normal" fill="#ff00ff" text-anchor="start" pointer-events="visible" font-family="Open Sans" transform="matrix(1,0,0,1,15,0)"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><image  id="v-2280" pointer-events="visible"></image></g></g><g   id="j_147"  transform="translate(1850,1131)" style=""><g  id="v-2297" style="opacity: 1;"><rect  id="v-2298" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-2299" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Pipeliner AC</tspan></text><text  id="v-2300" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2301" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Pipeliner im AC Modus</tspan></text><g  id="v-2302" color="#ffffff" transform="matrix(1,0,0,1,222.5,211.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2303"></image></g></g><g   id="j_141"  transform="translate(1850,531)" style=""><g  id="v-2254" style="opacity: 1;"><rect  id="v-2255" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-2256" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Pipeliner CM</tspan></text><text  id="v-2257" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2258" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Pipeliner im Core Modus</tspan></text><g  id="v-2259" color="#ffffff" transform="matrix(1,0,0,1,222.5,211.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2260"></image></g></g><g   id="j_146"  transform="translate(2600,531)" style=""><g  id="v-2287" style="opacity: 1;"><rect  id="v-2288" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-2289" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,83.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Application Layer</tspan></text><text  id="v-2290" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,125.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2291" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,156.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Provides DMS and BPM</tspan><tspan dy="1.2em" x="0" >Functionality</tspan></text><g  id="v-2292" color="#ffffff" transform="matrix(1,0,0,1,210,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g  transform="translate(5 0)"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" fill="currentColor" viewBox="0 0 16 16"><path fill-rule="evenodd" d="M6.5 12a5.5 5.5 0 1 0 0-11 5.5 5.5 0 0 0 0 11zM13 6.5a6.5 6.5 0 1 1-13 0 6.5 6.5 0 0 1 13 0z"></path><path d="M10.344 11.742c.03.04.062.078.098.115l3.85 3.85a1 1 0 0 0 1.415-1.414l-3.85-3.85a1.007 1.007 0 0 0-.115-.1 6.538 6.538 0 0 1-1.398 1.4z"></path><path fill-rule="evenodd" d="M6.5 3a.5.5 0 0 1 .5.5V6h2.5a.5.5 0 0 1 0 1H7v2.5a.5.5 0 0 1-1 0V7H3.5a.5.5 0 0 1 0-1H6V3.5a.5.5 0 0 1 .5-.5z"></path></svg></g><g ></g><g ></g><g ></g></g><image  id="v-2293"></image></g></g><g   id="j_149"  transform="translate(1100,531)" style=""><g  id="v-2320" style="opacity: 1;"><rect  id="v-2321" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-2322" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,91.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Application Layer</tspan><tspan dy="1.2em" x="0" >(Jobs)</tspan></text><text  id="v-2323" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,176.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2324" font-size="24" xml:space="preserve" display="none" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,208.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" style="fill-opacity: 0; stroke-opacity: 0;" >-</tspan></text><g  id="v-2325" color="#ffffff" transform="matrix(1,0,0,1,222.5,218.1)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2326"></image></g></g><g   id="j_148"  transform="translate(200,1135)" style=""><g  id="v-2310" style="opacity: 1;"><rect  id="v-2311" rx="1" ry="1" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></rect><text  id="v-2312" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,83.1)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >Identity Provider</tspan></text><text  id="v-2313" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,125.6)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2314" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,156.9)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >Provider or Broker for Identity</tspan><tspan dy="1.2em" x="0" >Information and SSO Services</tspan></text><g  id="v-2315" color="#000000" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(0, 0, 0);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2316"></image></g></g><g   id="j_150" ><path  stroke="#707070" d="M 649 1135 L 1101 831" id="v-2339" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.830343137666269,-0.5572524326824743,0.5572524326824743,0.830343137666269,648.510009765625,1135)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2341" transform="matrix(-0.8303429892609396,0.5572526538162085,-0.5572526538162085,-0.8303429892609396,1107.0624798682716,839.3034131200723)" style="opacity: 1;"></path><path  d="M 649 1135 L 1101 831" id="v-2340" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2330"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,875,983)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2334" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="76.39642333984375" height="33.36030960083008" transform="matrix(1,0,0,1,-38.2,-16.7)"></rect><text joint-selector="text" id="v-2333" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.3)"><tspan dy="0" >Import</tspan></text></g><g id="v-2331"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,875,1010)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2336" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="458.9827880859375" height="22.09885311126709" transform="matrix(1,0,0,1,-229.5,-11.1)"></rect><text joint-selector="text" id="v-2335" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.1)"><tspan dy="0" >[Periodic Import of Account / Group Information via LDAP]</tspan></text></g><g id="v-2332"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,865,1019.25)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2338" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2337" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2343" display="none"><g  id="v-2328"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2329"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2342" display="none"><g  id="v-2327" transform="translate(682.1913575695428, 1112.676609068272) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_151" ><path  stroke="#707070" d="M 2650 531 L 2308 238 C 2302.6666666666665 233.33333333333331 2296.6666666666665 231 2290 231 L 1860 231 C 1853.3333333333333 231 1847.3333333333333 233.33333333333331 1842 238 L 1500 531" id="v-2358" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.7592566796391994,-0.650791283303071,0.650791283303071,-0.7592566796391994,2650,531)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2360" transform="matrix(0.7592566796391993,-0.6507912833030712,0.6507912833030712,0.7592566796391993,1493.4920496674522,523.4074114663263)" style="opacity: 1;"></path><path  d="M 2650 531 L 2308 238 C 2302.6666666666665 233.33333333333331 2296.6666666666665 231 2290 231 L 1860 231 C 1853.3333333333333 231 1847.3333333333333 233.33333333333331 1842 238 L 1500 531" id="v-2359" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2352"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2075,231)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2355" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="174.37374877929688" height="61.94827461242676" transform="matrix(1,0,0,1,-87.2,-31)"></rect><text joint-selector="text" id="v-2354" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-22.6)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-2353"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2065,273)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2357" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2356" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2300, 231)" id="v-2496"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(1850, 231)" id="v-2497"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2362" display="none"><g  id="v-2350"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2351"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2361" display="none"><g  id="v-2347" transform="translate(2619.6234671200127, 504.97566042737947) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_152" ><path  stroke="#707070" d="M 650 1336 L 1840 1608 C 1846.6666666666665 1609.3333333333333 1853.3333333333333 1610 1860 1610 L 2290 1610 C 2296.6666666666665 1610 2301.6666666666665 1607 2305 1601 L 2740 831" id="v-2377" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9749652936359653,0.22235709164615378,-0.22235709164615378,0.9749652936359653,650,1336.3199462890625)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2379" transform="matrix(-0.49199422562363226,0.8705984619518934,-0.8705984619518934,-0.49199422562363226,2748.9359854695053,835.9199512890611)" style="opacity: 1;"></path><path  d="M 650 1336 L 1840 1608 C 1846.6666666666665 1609.3333333333333 1853.3333333333333 1610 1860 1610 L 2290 1610 C 2296.6666666666665 1610 2301.6666666666665 1607 2305 1601 L 2740 831" id="v-2378" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2368"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1906.0047607421875,1610)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2372" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="108.16352081298828" height="33.14827537536621" transform="matrix(1,0,0,1,-54.1,-16.6)"></rect><text joint-selector="text" id="v-2371" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.2)"><tspan dy="0" >Authorize</tspan></text></g><g id="v-2369"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1906.0047607421875,1637)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2374" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="330.18792724609375" height="22.09885311126709" transform="matrix(1,0,0,1,-165.1,-11.1)"></rect><text joint-selector="text" id="v-2373" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.1)"><tspan dy="0" >[Single Sign On with optional Multi Factor]</tspan></text></g><g id="v-2370"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,1896.0047607421875,1646.25)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2376" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2375" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1850, 1610)" id="v-2498"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(2300, 1610)" id="v-2499"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2381" display="none"><g  id="v-2366"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2367"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2380" display="none"><g  id="v-2363" transform="translate(688.9943402628747, 1344.9129920600856) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_153" ><path  stroke="#707070" d="M 1850 591 L 1709 535 C 1703 532.3333333333333 1697 532.3333333333333 1691 535 L 1550 591" id="v-2394" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.928476707906966,-0.3713906337998342,0.3713906337998342,-0.928476707906966,1850,591)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2396" transform="matrix(0.9284766089996245,-0.3713908810681253,0.3713908810681253,0.9284766089996245,1546.286115138385,581.7152144980288)" style="opacity: 1;"></path><path  d="M 1850 591 L 1709 535 C 1703 532.3333333333333 1697 532.3333333333333 1691 535 L 1550 591" id="v-2395" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2388"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1700,533)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2391" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="174.37374877929688" height="61.94827461242676" transform="matrix(1,0,0,1,-87.2,-31)"></rect><text joint-selector="text" id="v-2390" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-22.6)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-2389"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1690,575)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2393" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2392" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1700, 531)" id="v-2500"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2398" display="none"><g  id="v-2386"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2387"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2397" display="none"><g  id="v-2385" transform="translate(1812.8246774688942, 576.2353328954473) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_154" ><path  stroke="#707070" d="M 2300 771 L 2441 827 C 2447 829.6666666666666 2453 829.6666666666666 2459 827 L 2600 771" id="v-2411" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9284766955435519,0.371390664708372,-0.371390664708372,0.9284766955435519,2300,771)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2413" transform="matrix(-0.928476707906966,0.37139063379983406,-0.37139063379983406,-0.928476707906966,2603.714005448318,780.2847889637276)" style="opacity: 1;"></path><path  d="M 2300 771 L 2441 827 C 2447 829.6666666666666 2453 829.6666666666666 2459 827 L 2600 771" id="v-2412" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2405"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2450,829)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2408" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="174.37374877929688" height="61.94827461242676" transform="matrix(1,0,0,1,-87.2,-31)"></rect><text joint-selector="text" id="v-2407" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-22.6)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-2406"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2440,871)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2410" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2409" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2450, 831)" id="v-2501"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2415" display="none"><g  id="v-2403"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2404"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2414" display="none"><g  id="v-2402" transform="translate(2337.175322531106, 785.7646671045527) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_155" ><path  stroke="#707070" d="M 1550 771 L 1691 827 C 1697 829.6666666666666 1703 829.6666666666666 1709 827 L 1850 771" id="v-2428" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9284766955435519,0.371390664708372,-0.371390664708372,0.9284766955435519,1550,771)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2430" transform="matrix(-0.928476707906966,0.37139063379983406,-0.37139063379983406,-0.928476707906966,1853.7138833780054,780.2847889637276)" style="opacity: 1;"></path><path  d="M 1550 771 L 1691 827 C 1697 829.6666666666666 1703 829.6666666666666 1709 827 L 1850 771" id="v-2429" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2422"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1700,829)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2425" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="174.37374877929688" height="61.94827461242676" transform="matrix(1,0,0,1,-87.2,-31)"></rect><text joint-selector="text" id="v-2424" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-22.6)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-2423"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1690,871)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2427" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2426" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1700, 831)" id="v-2502"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2432" display="none"><g  id="v-2420"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2421"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2431" display="none"><g  id="v-2419" transform="translate(1587.1753225311058, 785.7646671045527) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_156" ><path  stroke="#707070" d="M 1550 617 L 1840 534 C 1846.6666666666665 532 1853.3333333333333 531 1860 531 L 2290 531 C 2296.6666666666665 531 2303.333333333333 532 2310 534 L 2600 617" id="v-2447" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.9615275666042731,-0.2747084612094524,0.2747084612094524,0.9615275666042731,1550,616.7100219726562)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2449" transform="matrix(-0.9615275666042732,-0.2747084612094521,0.2747084612094521,-0.9615275666042732,2597.252956678948,626.3252509031372)" style="opacity: 1;"></path><path  d="M 1550 617 L 1840 534 C 1846.6666666666665 532 1853.3333333333333 531 1860 531 L 2290 531 C 2296.6666666666665 531 2303.333333333333 532 2310 534 L 2600 617" id="v-2448" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2441"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2075,531)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2444" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="174.37374877929688" height="61.94827461242676" transform="matrix(1,0,0,1,-87.2,-31)"></rect><text joint-selector="text" id="v-2443" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-22.6)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-2442"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2065,573)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2446" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2445" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(1850, 531)" id="v-2503"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g><g  transform="translate(2300, 531)" id="v-2504"><circle  idx="1" r="10"></circle><path  idx="1" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="1" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2451" display="none"><g  id="v-2439"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2440"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2450" display="none"><g  id="v-2436" transform="translate(1588.4559498905949, 605.9936419278642) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_157" ><path  stroke="#707070" d="M 2263 1131 L 2638 831" id="v-2464" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.7808686753084834,-0.624695215222571,0.624695215222571,0.7808686753084834,2262.5,1131)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2466" transform="matrix(-0.7808688416748546,0.6246950072646418,-0.6246950072646418,-0.7808688416748546,2643.747044739395,838.8086865862896)" style="opacity: 1;"></path><path  d="M 2263 1131 L 2638 831" id="v-2465" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2455"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2450.5,981)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2459" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="102.4661636352539" height="33.14827537536621" transform="matrix(1,0,0,1,-51.2,-16.6)"></rect><text joint-selector="text" id="v-2458" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.2)"><tspan dy="0" >consume</tspan></text></g><g id="v-2456"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2450.5,1008)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2461" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="286.33551025390625" height="22.09885311126709" transform="matrix(1,0,0,1,-143.2,-11.1)"></rect><text joint-selector="text" id="v-2460" font-size="17px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-8.1)"><tspan dy="0" >[Advaced Connect Protocol Adapter]</tspan></text></g><g id="v-2457"  label-idx="2" cursor="move" transform="matrix(1,0,0,1,2440.5,1017.25)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2463" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2462" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2468" display="none"><g  id="v-2453"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2454"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2467" display="none"><g  id="v-2452" transform="translate(2294.234752377721, 1106.012198097823) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_158" ><path  stroke="#707070" d="M 2600 591 L 2459 535 C 2453 532.3333333333333 2447 532.3333333333333 2441 535 L 2300 591" id="v-2481" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.928476707906966,-0.3713906337998342,0.3713906337998342,-0.928476707906966,2600,591)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2483" transform="matrix(0.9284766089996245,-0.3713908810681253,0.3713908810681253,0.9284766089996245,2296.2859930680725,581.7152144980288)" style="opacity: 1;"></path><path  d="M 2600 591 L 2459 535 C 2453 532.3333333333333 2447 532.3333333333333 2441 535 L 2300 591" id="v-2482" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2475"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2450,533)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2478" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="174.37374877929688" height="61.94827461242676" transform="matrix(1,0,0,1,-87.2,-31)"></rect><text joint-selector="text" id="v-2477" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-22.6)"><tspan dy="0" >cluster</tspan><tspan dy="1.2em" x="0" >communication</tspan></text></g><g id="v-2476"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2440,575)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2480" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2479" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"><g  transform="translate(2450, 531)" id="v-2505"><circle  idx="0" r="10"></circle><path  idx="0" d="M16,5.333c-7.732,0-14,4.701-14,10.5c0,1.982,0.741,3.833,2.016,5.414L2,25.667l5.613-1.441c2.339,1.317,5.237,2.107,8.387,2.107c7.732,0,14-4.701,14-10.5C30,10.034,23.732,5.333,16,5.333z" transform="translate(5, -33)"></path><path  idx="0" transform="scale(.8) translate(9.5, -37)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"><title>Remove vertex.</title></path></g></g><g  id="v-2485" display="none"><g  id="v-2473"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2474"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2484" display="none"><g  id="v-2472" transform="translate(2562.824677468894, 576.2353328954473) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g></g><g ></g><g ></g><g ></g></g></svg>
\ No newline at end of file
diff --git a/dsl/export/sl_user-key.svg b/dsl/export/sl_user-key.svg
new file mode 100644
index 0000000..6944f71
--- /dev/null
+++ b/dsl/export/sl_user-key.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 2500 1000" style="background: #ffffff"><g transform="translate(25,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#dddddd" stroke-width="2" stroke="#c7c7c7"/><text x="225" y="131.25" text-anchor="middle" fill="#000000" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Element</tspan></text></g><g transform="translate(525,100)"><rect width="450" height="300" rx="20" ry="20" x="0" y="0" fill="#0f9536" stroke-width="5" stroke="#0f9536"/><rect width="370" height="280" rx="5" ry="5" x="40" y="10" fill="#11a63c" stroke-width="0"/><ellipse cx="20" cy="150" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><line x1="430" y1="125" x2="430" y2="175" stroke-width="5" stroke="#11a63c"/><text x="225" y="131.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">mobileclient, nscale</tspan></text></g><g transform="translate(1025,100)"><rect width="450" height="300" rx="3" ry="3" x="0" y="0" fill="#11a63c" stroke-width="2" stroke="#0f9536"/><text x="225" y="131.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">nscale</tspan></text></g><g transform="translate(1525,25)"><rect x="0" y="180" width="450" height="270" rx="90" fill="#dddddd" stroke-width="2" stroke="#c7c7c7"/><circle cx="225" cy="100" r="100" fill="#dddddd" stroke-width="2" stroke="#c7c7c7"/><line x1="90" y1="300" x2="90" y2="450" stroke-width="2" stroke="#c7c7c7"/><line x1="360" y1="300" x2="360" y2="450" stroke-width="2" stroke="#c7c7c7"/><text x="225" y="256.25" text-anchor="middle" fill="#000000" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Person</tspan></text></g><g transform="translate(2025,100)"><rect width="450" height="300" rx="10" ry="10" x="0" y="0" fill="#0f9536" stroke-width="5" stroke="#0f9536"/><rect width="430" height="250" rx="10" ry="10" x="10" y="40" fill="#11a63c" stroke-width="0"/><rect width="340" height="20" rx="10" ry="10" x="100" y="10" fill="#11a63c" stroke-width="0"/><ellipse cx="20" cy="20" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><ellipse cx="50" cy="20" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><ellipse cx="80" cy="20" rx="10" ry="10" fill="#11a63c" stroke-width="0"/><text x="225" y="141.25" text-anchor="middle" fill="#ffffff" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">webclient, nscale</tspan></text></g><g transform="translate(25,670)"><path d="M390,0 L390,60 L450,30 L 390,0" style="fill:#707070" stroke-dasharray="" /><path d="M0,30 L390,30" style="stroke:#707070; stroke-width: 6; fill: none; stroke-dasharray: 30 30;" /><text x="225" y="76.25" text-anchor="middle" fill="#707070" font-size="30px" font-family="Open Sans"><tspan x="225" dy="40px">Relationship</tspan></text></g></svg>
\ No newline at end of file
diff --git a/dsl/export/sl_user.svg b/dsl/export/sl_user.svg
new file mode 100644
index 0000000..6ee651f
--- /dev/null
+++ b/dsl/export/sl_user.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" viewBox="0 0 3100 1400" style="background: #ffffff"><defs joint-selector="defs"></defs><g joint-selector="layers"  transform="matrix(1,0,0,1,0,0)"><g ></g><g ><g   id="j_173"  transform="translate(20,1355)"><g id="v-2630"><text  id="v-2631" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >Tuesday, December 19, 2023 at 8:42 AM Central European Standard Time</tspan></text></g></g><g   id="j_172"  transform="translate(20,1324)"><g id="v-2628"><text  id="v-2629" font-size="22px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#aaaaaa" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >shows how endusers are working with the system</tspan></text></g></g><g   id="j_171"  transform="translate(20,1280)"><g id="v-2626"><text  id="v-2627" font-size="36px" xml:space="preserve" y="0.8em" font-weight="normal" text-anchor="start" fill="#000000" pointer-events="none" font-family="Open Sans" display="block"><tspan dy="0" >User Access</tspan></text></g></g><g   id="j_162"  transform="translate(949,900)" style=""><g  id="v-2506" style="opacity: 1;"><rect  id="v-2507" rx="1" ry="1" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#11a63c" width="450" height="300" style="fill: rgb(17, 166, 60); stroke: rgb(15, 149, 54);"></rect><text  id="v-2508" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Cockpit</tspan></text><text  id="v-2509" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2510" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Rich Windows Client</tspan></text><g  id="v-2511" color="#ffffff" transform="matrix(1,0,0,1,222.5,211.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2512"></image></g></g><g   id="j_163"  transform="translate(1699,900)" style=""><g  id="v-2513" style="opacity: 1;"><rect  id="v-2514" rx="10" ry="10" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#0f9536" width="450" height="300" style="fill: rgb(15, 149, 54); stroke: rgb(15, 149, 54);"></rect><rect  id="v-2515" rx="10" ry="10" stroke="#0f9536" stroke-width="0" pointer-events="visiblePainted" fill="#11a63c" width="430" height="250" x="10" y="40" style="fill: rgb(17, 166, 60);"></rect><ellipse  id="v-2522" fill="#11a63c" cx="20" cy="20" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><ellipse  id="v-2523" fill="#11a63c" cx="50" cy="20" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><ellipse  id="v-2524" fill="#11a63c" cx="80" cy="20" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><rect  id="v-2516" rx="10" ry="10" stroke="#444444" stroke-width="0" pointer-events="visiblePainted" fill="#11a63c" width="340" height="20" x="100" y="10" style="fill: rgb(17, 166, 60);"></rect><text  id="v-2517" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,113.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Web</tspan></text><text  id="v-2518" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,155.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2519" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,186.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Thin Web Client</tspan></text><g  id="v-2520" font-weight="normal" text-anchor="middle" color="#ffffff" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2521"></image></g></g><g   id="j_164"  transform="translate(2449,900)" style=""><g  id="v-2531" style="opacity: 1;"><rect  id="v-2532" rx="1" ry="1" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" width="450" height="300" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></rect><text  id="v-2533" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,83.1)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >Identity Provider</tspan></text><text  id="v-2534" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,125.6)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2535" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,225,156.9)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >Provider or Broker for Identity</tspan><tspan dy="1.2em" x="0" >Information and SSO Services</tspan></text><g  id="v-2536" color="#000000" transform="matrix(1,0,0,1,222.5,226.9)" display="none" style="fill: rgb(0, 0, 0);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2537"></image></g></g><g   id="j_165"  transform="translate(1349,200)" style=""><g  id="v-2541" style="opacity: 1;"><rect  x="0" y="160" width="400" height="240" rx="70" id="v-2543" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></rect><circle  cx="200" cy="88.88888888888889" r="88.88888888888889" id="v-2542" stroke="#c7c7c7" stroke-width="2" pointer-events="visiblePainted" fill="#dddddd" style="fill: rgb(221, 221, 221); stroke: rgb(199, 199, 199);"></circle><line  x1="80" y1="266.6666666666667" x2="80" y2="400" id="v-2549" stroke="#c7c7c7" stroke-width="2" style="stroke: rgb(199, 199, 199);"></line><line  x1="320" y1="266.6666666666667" x2="320" y2="400" id="v-2550" stroke="#c7c7c7" stroke-width="2" style="stroke: rgb(199, 199, 199);"></line><text  id="v-2544" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,200,213.1)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >User</tspan></text><text  id="v-2545" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,200,255.6)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >[Person]</tspan></text><text  id="v-2546" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#000000" transform="matrix(1,0,0,1,200,286.9)" style="fill: rgb(0, 0, 0);"><tspan dy="0" >uses the Business Applications</tspan><tspan dy="1.2em" x="0" >running in the Environment</tspan></text><g  id="v-2547" font-weight="normal" text-anchor="middle" color="#000000" transform="matrix(1,0,0,1,197.5,356.9)" display="none" style="fill: rgb(0, 0, 0);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2548"></image></g></g><g   id="j_166"  transform="translate(199,900)" style=""><g  id="v-2551" style="opacity: 1;"><rect  id="v-2552" rx="20" ry="20" stroke="#0f9536" stroke-width="2" pointer-events="visiblePainted" fill="#0f9536" width="450" height="300" style="fill: rgb(15, 149, 54); stroke: rgb(15, 149, 54);"></rect><rect  id="v-2553" rx="5" ry="5" stroke="#0f9536" stroke-width="0" pointer-events="visiblePainted" fill="#11a63c" width="370" height="280" x="40" y="10" style="fill: rgb(17, 166, 60);"></rect><ellipse  id="v-2559" fill="#11a63c" cx="20" cy="150" rx="10" ry="10" style="fill: rgb(17, 166, 60);"></ellipse><line  style="stroke-width: 2px; stroke: rgb(17, 166, 60);" id="v-2560" stroke="#11a63c" x1="430" y1="125" x2="430" y2="175"></line><text  id="v-2554" font-size="34" xml:space="preserve" y="0.8em" font-weight="bold" text-anchor="middle" pointer-events="visible" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,98.1)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >nscale Mobile</tspan></text><text  id="v-2555" font-size="17" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,140.6)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >[Software System]</tspan></text><text  id="v-2556" font-size="24" xml:space="preserve" y="0.8em" text-anchor="middle" font-family="Open Sans" fill="#ffffff" transform="matrix(1,0,0,1,225,171.9)" style="fill: rgb(255, 255, 255);"><tspan dy="0" >Rich Mobile Client</tspan></text><g  id="v-2557" font-weight="normal" text-anchor="middle" color="#ffffff" transform="matrix(1,0,0,1,222.5,211.9)" display="none" style="fill: rgb(255, 255, 255);"><g ></g><g ></g><g ></g><g ></g></g><image  id="v-2558"></image></g></g><g   id="j_167" ><path  stroke="#707070" d="M 1349 516 L 649 920" id="v-2570" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.8658674351362989,0.5002735099627874,-0.5002735099627874,-0.8658674351362989,1349,515.5599975585938)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2572" transform="matrix(0.865867435136299,-0.5002735099627872,0.5002735099627872,0.865867435136299,643.9972819552592,911.3413141662336)" style="opacity: 1;"></path><path  d="M 1349 516 L 649 920" id="v-2571" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2564"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,999,718)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2567" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="39.67184066772461" height="37.201433181762695" transform="matrix(1,0,0,1,-19.8,-18.6)"></rect><text joint-selector="text" id="v-2566" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-9.9)"><tspan dy="0" >use</tspan></text></g><g id="v-2565"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,989,745)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2569" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2568" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2574" display="none"><g  id="v-2562"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2563"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2573" display="none"><g  id="v-2561" transform="translate(1314.3558728077196, 535.9946105509733) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_168" ><path  stroke="#707070" d="M 1434 600 L 1261 900" id="v-2584" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(-0.49972909295743995,0.8661817555524558,-0.8661817555524558,-0.49972909295743995,1433.6199951171875,600)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2586" transform="matrix(0.49972920829651307,-0.8661816890094942,0.8661816890094942,0.49972920829651307,1251.8781224722525,895.0027206079111)" style="opacity: 1;"></path><path  d="M 1434 600 L 1261 900" id="v-2585" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2578"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1347.5,750)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2581" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="39.67184066772461" height="37.201433181762695" transform="matrix(1,0,0,1,-19.8,-18.6)"></rect><text joint-selector="text" id="v-2580" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-9.9)"><tspan dy="0" >use</tspan></text></g><g id="v-2579"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1337.5,777)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2583" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2582" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2588" display="none"><g  id="v-2576"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2577"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2587" display="none"><g  id="v-2575" transform="translate(1414.0177684012028, 634.6512686684345) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_169" ><path  stroke="#707070" d="M 1664 600 L 1837 900" id="v-2598" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.4997290929574401,0.8661817555524557,-0.8661817555524557,0.4997290929574401,1664.3800048828125,600)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2600" transform="matrix(-0.49972920829651346,-0.8661816890094941,0.8661816890094941,-0.49972920829651346,1828.7982437475578,904.9973047738413)" style="opacity: 1;"></path><path  d="M 1664 600 L 1837 900" id="v-2599" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2592"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,1750.5,750)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2595" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="39.67184066772461" height="37.201433181762695" transform="matrix(1,0,0,1,-19.8,-18.6)"></rect><text joint-selector="text" id="v-2594" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-9.9)"><tspan dy="0" >use</tspan></text></g><g id="v-2593"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,1740.5,777)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2597" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2596" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2602" display="none"><g  id="v-2590"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2591"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2601" display="none"><g  id="v-2589" transform="translate(1683.9822315987974, 634.6512686684345) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g><g   id="j_170" ><path  stroke="#707070" d="M 1749 516 L 2449 920" id="v-2615" stroke-width="2" stroke-dasharray="30 30" fill="none" style="opacity: 1;"></path><path  fill="black" stroke="black" d="M 0 0 0 0" transform="matrix(0.8658674517901603,0.5002734811384812,-0.5002734811384812,0.8658674517901603,1749,515.5599975585938)"></path><path  fill="#707070" stroke="#707070" d="M 20 0 L 0 10 L 20 20 z" id="v-2617" transform="matrix(-0.865867435136299,-0.5002735099627873,0.5002735099627873,-0.865867435136299,2443.997247845485,928.6586628689596)" style="opacity: 1;"></path><path  d="M 1749 516 L 2449 920" id="v-2616" fill="none" style="cursor: auto; pointer-events: visiblepainted;"></path><g ><g id="v-2609"  label-idx="0" cursor="move" transform="matrix(1,0,0,1,2099,718)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2612" fill="#ffffff" rx="3" ry="3" pointer-events="none" width="141.0312042236328" height="37.201433181762695" transform="matrix(1,0,0,1,-70.5,-18.6)"></rect><text joint-selector="text" id="v-2611" font-size="24px" xml:space="preserve" y="0.8em" fill="#707070" text-anchor="middle" pointer-events="none" font-family="Open Sans" font-weight="normal" transform="matrix(1,0,0,1,0,-9.9)"><tspan dy="0" >authenticate</tspan></text></g><g id="v-2610"  label-idx="1" cursor="move" transform="matrix(1,0,0,1,2089,745)" style="cursor: default; opacity: 1;"><rect joint-selector="rect" id="v-2614" fill="#ffffff" rx="3" ry="3"  width="0" height="0" transform="matrix(1,0,0,1,0,0)" display="none"></rect><text joint-selector="text" id="v-2613" fill="#000000" font-size="14" text-anchor="middle" pointer-events="none"></text></g></g><g  display="none" style="display: none;"></g><g  id="v-2619" display="none"><g  id="v-2607"><path  end="source" d="M 26 0 L 0 13 L 26 26 z"></path></g><g  id="v-2608"><path  end="target" d="M 26 0 L 0 13 L 26 26 z"></path></g></g><g  id="v-2618" display="none"><g  id="v-2606" transform="translate(1783.6441271922806, 535.9946105509733) "><g  event="remove"><circle r="11"></circle><path transform="scale(.8) translate(-16, -16)" d="M24.778,21.419 19.276,15.917 24.777,10.415 21.949,7.585 16.447,13.087 10.945,7.585 8.117,10.415 13.618,15.917 8.116,21.419 10.946,24.248 16.447,18.746 21.948,24.248z"></path><title>Remove link.</title></g><g  event="link:options"><circle r="11" transform="translate(25)"></circle><path fill="white" transform="scale(.55) translate(29, -16)" d="M31.229,17.736c0.064-0.571,0.104-1.148,0.104-1.736s-0.04-1.166-0.104-1.737l-4.377-1.557c-0.218-0.716-0.504-1.401-0.851-2.05l1.993-4.192c-0.725-0.91-1.549-1.734-2.458-2.459l-4.193,1.994c-0.647-0.347-1.334-0.632-2.049-0.849l-1.558-4.378C17.165,0.708,16.588,0.667,16,0.667s-1.166,0.041-1.737,0.105L12.707,5.15c-0.716,0.217-1.401,0.502-2.05,0.849L6.464,4.005C5.554,4.73,4.73,5.554,4.005,6.464l1.994,4.192c-0.347,0.648-0.632,1.334-0.849,2.05l-4.378,1.557C0.708,14.834,0.667,15.412,0.667,16s0.041,1.165,0.105,1.736l4.378,1.558c0.217,0.715,0.502,1.401,0.849,2.049l-1.994,4.193c0.725,0.909,1.549,1.733,2.459,2.458l4.192-1.993c0.648,0.347,1.334,0.633,2.05,0.851l1.557,4.377c0.571,0.064,1.148,0.104,1.737,0.104c0.588,0,1.165-0.04,1.736-0.104l1.558-4.377c0.715-0.218,1.399-0.504,2.049-0.851l4.193,1.993c0.909-0.725,1.733-1.549,2.458-2.458l-1.993-4.193c0.347-0.647,0.633-1.334,0.851-2.049L31.229,17.736zM16,20.871c-2.69,0-4.872-2.182-4.872-4.871c0-2.69,2.182-4.872,4.872-4.872c2.689,0,4.871,2.182,4.871,4.872C20.871,18.689,18.689,20.871,16,20.871z"></path><title>Link options.</title></g></g></g></g></g><g ></g><g ></g><g ></g></g></svg>
\ No newline at end of file
diff --git a/dsl/filePvc.dsl b/dsl/filePvc.dsl
new file mode 100644
index 0000000..0f6df34
--- /dev/null
+++ b/dsl/filePvc.dsl
@@ -0,0 +1,4 @@
+filepvc = Container "File Volume" "Persistent Volume Claim for a shared RWX File Volume" { 
+    technology "PVC"
+    tags "Kubernetes - pvc"
+}
diff --git a/dsl/ilm.dsl b/dsl/ilm.dsl
new file mode 100644
index 0000000..9d092c6
--- /dev/null
+++ b/dsl/ilm.dsl
@@ -0,0 +1,19 @@
+ilm = softwareSystem "nscale ILM Connector" {
+    tags "nscale"
+
+    replicaset = Container "ReplicaSet" "StatefulSet with default Replica 2" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        main = component "ILM Container" "Container Template with official Image" {
+            technology "Java"
+            tags "nscale"
+            -> nplus.confpvc "mount conf"
+            -> nappl.svc "consume" "Advanced Connect Protocol Adapter"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+    !include "ingress.dsl"
+}
\ No newline at end of file
diff --git a/dsl/ingress.dsl b/dsl/ingress.dsl
new file mode 100644
index 0000000..d11b45c
--- /dev/null
+++ b/dsl/ingress.dsl
@@ -0,0 +1,13 @@
+certificate = Container "Certificate" "https Certificate" {
+    tags "Kubernetes - crd"
+    technology "Kubernetes"
+    clusterIssuer -> this "Provide Certificate"
+}
+ingress = Container "Ingress" "Layer 7 Ingress Configuration" {
+    tags "Kubernetes - ing"
+    technology "Kubernetes"
+    this -> ingressController "Provide Configuration"
+    certificate -> this "use"
+}
+ingressController -> replicaset.main "balance Layer 7 traffic"
+svc -> ingressController "provide Pod IPs"
\ No newline at end of file
diff --git a/dsl/license.dsl b/dsl/license.dsl
new file mode 100644
index 0000000..b7e6733
--- /dev/null
+++ b/dsl/license.dsl
@@ -0,0 +1,3 @@
+license = component "license" "nscale License Secret" {
+    tags "Kubernetes - secret"
+}
\ No newline at end of file
diff --git a/dsl/mon.dsl b/dsl/mon.dsl
new file mode 100644
index 0000000..4cb650c
--- /dev/null
+++ b/dsl/mon.dsl
@@ -0,0 +1,30 @@
+mon = softwareSystem "nscale Monitoring Console" {
+    tags "nscale"
+    description "provides monitoring for all nscale components"
+    !include "dataPvc.dsl"
+    replicaset = Container "ReplicaSet" "StatefulSet with Replica 1" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        main = component "MON Container" "Container Template with official Image" {
+            technology "Java"
+            tags "nscale"
+            -> datapvc "mount data"
+            -> nplus.confpvc "mount etc"
+
+            -> nappl "monitor"
+            -> nappljobs "monitor"
+            -> nstlA "monitor"
+            -> nstlB "monitor"
+            -> cmis "monitor"
+            -> ilm "monitor"
+            -> pipelinercm "monitor"
+            -> pipelinerac "monitor"
+            -> web "monitor"
+            -> rs "monitor"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+}
\ No newline at end of file
diff --git a/dsl/nappl.dsl b/dsl/nappl.dsl
new file mode 100644
index 0000000..bd76eae
--- /dev/null
+++ b/dsl/nappl.dsl
@@ -0,0 +1,25 @@
+nappl = softwareSystem "nscale Application Layer" {
+    tags "nscale"
+    description "Provides DMS and BPM Functionality"
+    replicaset = Container "ReplicaSet" "StatefulSet with default Replica 2" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        !include "license.dsl"
+        main = component "NAPPL Container" "Container Template with official Image" {
+            technology "Java"
+            tags "nscale"
+            -> nplus.confpvc "mount conf"
+            -> nstlA.svc "store documents"
+            -> nstlB.svc "store documents"
+            -> database.svc "store metadata"
+            -> rs.svc "create renditions"
+            -> license "read"
+            -> sap "replicate"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+    !include "ingress.dsl"
+}
\ No newline at end of file
diff --git a/dsl/nappljobs.dsl b/dsl/nappljobs.dsl
new file mode 100644
index 0000000..3895012
--- /dev/null
+++ b/dsl/nappljobs.dsl
@@ -0,0 +1,22 @@
+nappljobs = softwareSystem "nscale Application Layer (Jobs)" {
+    tags "nscale"
+    replicaset = Container "ReplicaSet" "StatefulSet Replica 1 dedicated to Jobs" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        !include "license.dsl"
+        main = component "NAPPL Container" "Container Template with official Image" {
+            technology "Java"
+            tags "nscale"
+            -> nplus.confpvc "mount conf"
+            -> nstlA.svc "store documents"
+            -> nstlB.svc "store documents"
+            -> database.svc "store metadata"
+            -> rs.svc "create renditions"          
+            -> license "read"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+}
\ No newline at end of file
diff --git a/dsl/nstl.dsl b/dsl/nstl.dsl
new file mode 100644
index 0000000..b85a04a
--- /dev/null
+++ b/dsl/nstl.dsl
@@ -0,0 +1,53 @@
+nstl = group "nstl" {
+nstlA = softwareSystem "nscale Storage Layer A" {
+    tags "nscale"
+    !include "dataPvc.dsl"
+    replicaset = Container "ReplicaSet" "StatefulSet with fix Replica 1" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        !include "license.dsl"
+        main = component "NSTL Container" "Container Template with official Image" {
+            technology "C++"
+            tags "nscale"
+            -> datapvc "mount arc"
+            -> datapvc "mount ret"
+            -> datapvc "mount HD"
+            -> datapvc "mount da"
+            -> nplus.confpvc "mount etc"
+            -> license "read"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+}
+
+nstlB = softwareSystem "nscale Storage Layer B" {
+    tags "nscale"
+    !include "dataPvc.dsl"
+    replicaset = Container "ReplicaSet" "StatefulSet with fix Replica 1" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        !include "license.dsl"
+        main = component "NSTL Container" "Container Template with official Image" {
+            technology "C++"
+            tags "nscale"
+            -> datapvc "mount arc"
+            -> datapvc "mount ret"
+            -> datapvc "mount HD"
+            -> datapvc "mount da"
+            -> nplus.confpvc "mount etc"
+            -> license "read"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+}
+
+nstlA -> nstlB "forward DA and Document"
+nstlB -> nstlA "forward DA and Document"
+
+}
\ No newline at end of file
diff --git a/dsl/pam.dsl b/dsl/pam.dsl
new file mode 100644
index 0000000..1d08f7e
--- /dev/null
+++ b/dsl/pam.dsl
@@ -0,0 +1,18 @@
+pam = softwareSystem "nscale Process Automation Modeler" {
+    tags "nscale"
+    description "provides modeling for workflows"
+    replicaset = Container "ReplicaSet" "StatefulSet with Replica 1" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        main = component "PAM Container" "Container Template with official Image" {
+            technology "Java"
+            tags "nscale"
+            -> nplus.confpvc "mount conf"
+            -> nappl.svc "consume" "Advanced Connector Protocol Adapter"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+}
\ No newline at end of file
diff --git a/dsl/pipelinerac.dsl b/dsl/pipelinerac.dsl
new file mode 100644
index 0000000..7815ea4
--- /dev/null
+++ b/dsl/pipelinerac.dsl
@@ -0,0 +1,24 @@
+pipelinerac = softwareSystem "nscale Pipeliner AC" "Pipeliner im AC Modus" {
+    tags "nscale"
+    !include "dataPvc.dsl"
+    replicaset = Container "ReplicaSet" "StatefulSet with Replica 1" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        !include "license.dsl"
+        main = component "WebDAV Container" "Sidecar Container Template with WebDAV Image" {
+            tags "nplus"
+        }
+        pl = component "Pipeliner Container" "Container Template with official Image" {
+            tags "nscale"
+            -> nplus.confpvc "mount conf"
+            -> nappl.svc "consume" "Advaced Connect Protocol Adapter"
+            -> rs.svc "create renditions"
+            -> license "read"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+    !include "ingress.dsl"
+}
diff --git a/dsl/pipelinercm.dsl b/dsl/pipelinercm.dsl
new file mode 100644
index 0000000..745f470
--- /dev/null
+++ b/dsl/pipelinercm.dsl
@@ -0,0 +1,26 @@
+pipelinercm = softwareSystem "nscale Pipeliner CM" "Pipeliner im Core Modus" {
+    tags "nscale"
+    !include "dataPvc.dsl"
+    replicaset = Container "ReplicaSet" "StatefulSet with Replica 1" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        !include "license.dsl"
+        main = component "WebDAV Container" "Sidecar Container Template with WebDAV Image" {
+            tags "nplus"
+        }
+        pl = component "Pipeliner Container" "Container Template with official Image" {
+            tags "nscale"
+            -> nplus.confpvc "mount conf"
+            -> nstlA.svc "store documents"
+            -> nstlB.svc "store documents"
+            -> database.svc "store metadata"
+            -> rs.svc "create renditions"
+            -> license "read"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+    !include "ingress.dsl"
+}
diff --git a/dsl/rs.dsl b/dsl/rs.dsl
new file mode 100644
index 0000000..9f280d7
--- /dev/null
+++ b/dsl/rs.dsl
@@ -0,0 +1,21 @@
+rs = softwareSystem "nscale Rendition Server" {
+    tags "nscale"
+    !include "filePvc.dsl"
+    replicaset = Container "ReplicaSet" "StatefulSet with default Replica 2" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        !include "license.dsl"
+        main = component "RS Container" "Container Template with official Image" {
+            technology "Java"
+            tags "nscale"
+            -> nplus.confpvc "mount conf"
+            -> filepvc "mount workspace"
+            -> license "read"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+    !include "ingress.dsl"
+}
\ No newline at end of file
diff --git a/dsl/service.dsl b/dsl/service.dsl
new file mode 100644
index 0000000..e612ab4
--- /dev/null
+++ b/dsl/service.dsl
@@ -0,0 +1,5 @@
+svc = Container "Service" "Kubernetes Service with Layer 4 Load Balancer" {
+    technology "Kubernetes"
+    tags "Kubernetes - svc"
+    this -> replicaset.main "balance Layer 4 traffic"
+}
\ No newline at end of file
diff --git a/dsl/sharepoint.dsl b/dsl/sharepoint.dsl
new file mode 100644
index 0000000..b48f3e7
--- /dev/null
+++ b/dsl/sharepoint.dsl
@@ -0,0 +1,40 @@
+sharepoint = group "sharepoint" {
+sharepointA = softwareSystem "nscale SharePoint Connector A" {
+    tags "nscale"
+    replicaset = Container "ReplicaSet" "StatefulSet with fix Replica 1" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        main = component "SharePoint Container" "Container Template with official Image" {
+            technology "Java"
+            tags "nscale"
+            -> nplus.confpvc "mount conf"
+            -> nappl.svc "consume" "Advanced Connector Protocol Adapter"
+            -> sharepoint "consume" "SharePoint API"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+}
+
+sharepointB = softwareSystem "nscale SharePoint Connector B" {
+    tags "nscale"
+    replicaset = Container "ReplicaSet" "StatefulSet with fix Replica 1" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        main = component "SharePoint Container" "Container Template with official Image" {
+            technology "Java"
+            tags "nscale"
+            -> nplus.confpvc "mount conf"
+            -> nappl.svc "consume" "Advanced Connector Protocol Adapter"
+            -> sharepoint "consume" "SharePoint API"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+}
+
+}
\ No newline at end of file
diff --git a/dsl/views.dsl b/dsl/views.dsl
new file mode 100644
index 0000000..911fdb8
--- /dev/null
+++ b/dsl/views.dsl
@@ -0,0 +1,49 @@
+SystemLandscape "sl_all" "Overview" {
+    title "Overview"
+    description "shows all Landscape"
+    include *
+    autoLayout
+}
+
+systemContext web "sc_web" "focus on nscale Web" {
+    include *
+    autoLayout
+}
+
+systemLandscape "sc_nstl" "focus on nscale Server Storage Layer" {
+    include nstl
+    autoLayout
+}
+
+systemContext nappl "sc_nappl" "focus on nscale Application Layer" {
+    include *
+    autoLayout
+}
+
+systemContext sap "sc_sap" "focus on SAP" {
+    include *
+    autoLayout
+}
+
+SystemLandscape "sl_user" "focus on the end user" {
+    title "User Access"
+    description "shows how endusers are working with the system"
+    include user webclient cockpitclient mobileclient idp
+    autoLayout
+}
+
+SystemLandscape "sl_nappl" "focus on nappl" {
+    title "nscale Application Layer"
+    description "the Application Layer Cluster and peripheral services"
+    include nappl nappljobs pipelinercm pipelinerac idp 
+    autoLayout lr
+}
+
+container nplus "c_nplus" "nplus Environment" {
+    title "nplus Environment"
+    description "the Environment handles multiple Inances running in a Kubernetes Namespace"
+    include * adminclient
+    exclude rs nappl nappljobs pipelinercm pipelinerac mon nstl web cmis ilm
+    autolayout
+}
+
diff --git a/dsl/waitFor.dsl b/dsl/waitFor.dsl
new file mode 100644
index 0000000..f3ca392
--- /dev/null
+++ b/dsl/waitFor.dsl
@@ -0,0 +1,5 @@
+waitFor = component "init:waitFor" "Init-Container that waits for any given preqequisite" {
+    technology "bash"
+    tags "nplus"
+    main -> this "waitFor"
+}
diff --git a/dsl/web.dsl b/dsl/web.dsl
new file mode 100644
index 0000000..1b2894f
--- /dev/null
+++ b/dsl/web.dsl
@@ -0,0 +1,19 @@
+web = softwareSystem "nscale Application Layer Web" {
+    tags "nscale"
+    description "provides html web ui for nscale"
+    replicaset = Container "ReplicaSet" "StatefulSet with default Replica 2" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        main = component "WEB Container" "Container Template with official Image" {
+            technology "Java"
+            tags "nscale"
+            -> nplus.confpvc "mount conf"
+            -> nappl.svc "consume" "Advanced Connector Protocol Adapter"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+    !include "ingress.dsl"
+}
\ No newline at end of file
diff --git a/dsl/webdav.dsl b/dsl/webdav.dsl
new file mode 100644
index 0000000..f654e6e
--- /dev/null
+++ b/dsl/webdav.dsl
@@ -0,0 +1,18 @@
+webdav = softwareSystem "nscale WEBDAV Connector" {
+    tags "nscale"
+    replicaset = Container "ReplicaSet" "StatefulSet with default Replica 2" {
+        technology "Kubernetes"
+        tags "Kubernetes - sts"
+
+        main = component "WEBDAV Container" "Container Template with official Image" {
+            technology "Java"
+            tags "nscale"
+            -> nplus.confpvc "mount conf"
+            -> nappl.svc "consume" "Advanced Connect Protocol Adapter"
+        }
+        !include "copyConf.dsl"
+        !include "waitFor.dsl"
+    }
+    !include "service.dsl"
+    !include "ingress.dsl"
+}
\ No newline at end of file
diff --git a/dsl/workspace.dsl b/dsl/workspace.dsl
new file mode 100644
index 0000000..1395404
--- /dev/null
+++ b/dsl/workspace.dsl
@@ -0,0 +1,170 @@
+workspace {
+    !identifiers hierarchical
+    
+    model {
+        properties {
+            "structurizr.groupSeparator" "/"
+        }
+
+        /* **************************************************************
+         * Services and Components running in the K8s cluster           *
+         ************************************************************** */
+
+        group "Kubernetes Cluster" {
+            ingressController = softwareSystem "Kubernetes Ingress Controller" "Layer 7 Load Balancer" "Kubernetes - ds"
+            clusterIssuer = softwareSystem "Cert Manager Cluster Issuer" "provides certificates" "Kubernetes - crd"
+            group "Namespace" {
+                !include "environment.dsl"
+                group "Instance" {
+                    !include "database.dsl"
+                    !include "rs.dsl"
+                    !include "nstl.dsl"
+                    group "nscale Application Layer Cluster" {
+                        !include "nappl.dsl"
+                        !include "nappljobs.dsl"
+                        !include "pipelinercm.dsl"
+                        !include "clusterService.dsl"
+                    }
+                    !include "web.dsl"
+                    !include "pipelinerac.dsl"
+                    !include "cmis.dsl"
+                    !include "webdav.dsl"
+                    !include "ilm.dsl"
+                    !include "mon.dsl"
+                    !include "pam.dsl"
+                    !include "sharepoint.dsl"
+
+                    !include "adminserver.dsl"
+                    !include "application.dsl"
+                }
+            }
+        }
+
+        /* **************************************************************
+         * Client Applications, accessing the Services and Components   *
+         ************************************************************** */
+
+        adminclient = softwareSystem "nscale Administrator" "Eclipse RCP Administrator Client" {
+            tags "richclient, nscale"
+            -> adminserver.l3lb "Remote Management" "RMS and https Protocols"
+        }
+        mobileclient = softwareSystem "nscale Mobile" "Rich Mobile Client" {
+            tags "mobileclient, nscale"
+            -> ingressController "https /nscalealinst1"
+        }
+        cockpitclient = softwareSystem "nscale Cockpit" "Rich Windows Client" {
+            tags "richtclient, nscale"
+            -> ingressController "https /nscalealinst1"
+        }
+        webclient = softwareSystem "nscale Web" "Thin Web Client" {
+            tags "webclient, nscale"
+            -> ingressController "https /nscale_web"
+        }
+
+
+
+        /* **************************************************************
+         * Users running the clients above                              *
+         ************************************************************** */
+
+        user = person "User" {
+            description "uses the Business Applications running in the Environment"
+            -> mobileclient "use"
+            -> cockpitclient "use"
+            -> webclient "use"
+        }
+        admin = person "Admin" {
+            description "Maintains and Operates the Environment"
+            -> adminclient "use"
+            -> nplus.davserver "mount"
+            -> nplus.toolbox "use"
+        }
+
+
+        /* **************************************************************
+         * 3rd Party Applications accessing the Services and Components *
+         ************************************************************** */
+
+        sap = softwareSystem "SAP" "SAP Server" {
+            -> ingressController "consume AL" "SAP Archive Link Protocol"
+            -> ingressController "consume ILM" "SAP Information Lifecycle Management Protocol"
+        }
+
+        o365sp = softwareSystem "SharePoint" "SharePoint Server" {
+        }
+
+        /* when you run a SAP System, you most likely also want to access it for replication */
+        nappl.replicaset.main -> sap "consume SNC" "SAP SNC Access"
+
+
+        app = softwareSystem "3rd Party Software" "Any Application with Access Rights" {
+            -> ingressController "AC" "nscale Advanced Connect API
+            -> ingressController "REST" "nscale REST API"
+            -> ingressController "CMIS REST" "cmis REST API"
+            -> ingressController "CMIS SOAP" "cmis SOAP API"
+            -> ingressController "Pipeliner DAV" "DAV Payload Dropoff Service"
+        }
+
+        /* **************************************************************
+         * 3rd Party Identity and Authentication Services               *
+         ************************************************************** */
+
+        idp = softwareSystem "Identity Provider" {
+            description "Provider or Broker for Identity Information and SSO Services"
+            -> nappl "Authorize" "Single Sign On with optional Multi Factor" "saml, openid"
+            -> nappljobs "Import" "Periodic Import of Account / Group Information via LDAP"
+            user -> this "authenticate"
+        }
+
+    }
+
+    views {
+
+        theme https://static.structurizr.com/themes/kubernetes-v0.3/theme.json
+
+        # As soon as we use our own views, all default views are gone...
+        !include "views.dsl"
+
+        styles {
+            element "Person" {
+                shape Person
+            }
+            element "Kubernetes - svc" {
+                shape hexagon
+            }
+            element "Database" {
+                background #707070
+                color #ffffff
+                shape cylinder
+            }
+            element "Kubernetes - pvc" {
+                shape cylinder
+            }
+            element "nscale" {
+                color #FFFFFF
+                background #11a63c
+            }
+            element "nplus" {
+                color #FFFFFF
+                background #424c63
+            }           
+            element "planned" {
+                opacity 30
+            }
+            element "mobileclient" {
+                shape "MobileDeviceLandscape"
+            }
+            element "richclient" {
+                shape "Window"
+            }
+            element "webclient" {
+                shape "WebBrowser"
+            }
+            element "Group" {
+                color #ff00ff
+            }
+        }
+
+    }
+
+}
\ No newline at end of file
diff --git a/samples/README.md b/samples/README.md
new file mode 100644
index 0000000..2d82ddc
--- /dev/null
+++ b/samples/README.md
@@ -0,0 +1,152 @@
+# The Samples
+
+- [Remote Management Server](administrator)  
+  Shows how you can setup an ***nplus Remote Management Server*** and expose a complete Instance on a single **virtual IP Adress** to be able to connect with the *nscale Administrator* from your desktop and even
+  perform any **offline configuration** tasks, such as **configuring the *nscale Pipeliner*** with its cold.xml.
+
+- [Applications](application)  
+  - shows how to deploy an ***nplus Application***, inlcuding **creating a Document area** in the *nscale Application Layer* and
+    **installing *nscale Business Apps*** or **custom *Generic Base Apps*** into multiple Document Areas.
+  - It also demonstrates how to use the *prepper* component to **download assets from git** or any other artifacs site.
+
+- [Blobstores](blobstore)  
+  - shows how to connect the *nscale Storage Layer* to an **Amazon S3** Object Store, an **Azure Blobstore** or any other compatiple Object Store, like **CephGW** or **min.io**
+  - it also demonstrates the use of **envMaps** and **envSecrets** to set environment variables outside the values.yaml file
+
+- [Certificates](certificates)  
+  - shows how to **disable certificate generation** and use a **prepared static certificate** for the ingress
+  - it also talks about the pitfalls of `.this`
+
+- [Cluster](cluster)  
+  shows how to render a cluster chart and prepare the cluster for *nplus*
+
+- [Defaults](default)  
+  Renders a **minimalistic** Instance manifest without any customization
+
+- [Detached Applications](detached)  
+  Shows how to separate the application from the instance but still use them in tandem. This technique is used to be able to separately update instance and application.
+
+- [Environments](environment)  
+  holds values for **different environments**, such as a lab environment (which is used for our internal test cases) or a production environment
+
+- [Instance Groups](group)  
+  - Large Instances can be split easily and re-grouped again with the `.instance.group` tag. This example shows how.  
+  - It also shows how to switch off any certificate or networkPolicy creation at Instance Level
+
+- [High Avalability](ha)  
+  - showcases a full **High Availability** szenario, including a dedicated **nappljobs** and redundant components to reduce the risk of outages
+
+- [Highest Doc ID / HID](hid)
+  - shows how to enable highest ID checking in *nstl*.
+
+- [No Waves](nowaves)  
+  Shows how to set up a simple argoCD Application without using any *waves* but just relying on *waitFor*
+
+- [Version Pinning](pinning)  
+  There are several ways how to pin the **version of *nscale* components**. This example shows how to stay flexible in terms of **nplus versions** and still pin *nscale* to a 
+  specific version.
+
+- [Resources](resources)
+  - demonstrates how for different environments, for different tenants depending on the usage (like amount of concurrent users) or scenarios alike,
+    you might want to use different sets of **resouce definitions for RAM, CPU** or HD Space.
+
+- [Security](security)  
+  IT Security is an important aspect when running an nplus Environment. This example shows
+  - how to configure **https for all inter-Pod communications**, and
+  - how to force **all connections** to be **encrypted**. (**Zero Trust Mode**)
+
+- [Shared Services](shared)  
+  You might want to have a central **nplus** Instance that can be used by multiple tenants. This example shows how to do that.
+
+- [SharePoint Retrieval HA](sharepoint)  
+  Normally, you either have HA with multiple replicas *or* you use multiple instances if you want different configurations per instance. This example shows how you can combine both approaches: Having mutliple instances with different configuration (for archiving) and a global ingress to all instances (for HA retrieval)
+
+- [Single Instance Mode](sim)  
+  Some *nplus* subscribers use **maximum tenant separation**, so not only **firewalling each component**, but also running each **Instance in a dedicated Namespace**.
+  This shows how to enable ***Single Instance Mode***, that melts the environment and instance together in a **single deployment**.
+
+- [Static Volumes](static)  
+  Shows how to disable dynamic volume provisioning (depending on the storage class) and use **pre-created static volumes** instead.
+
+- [Chart](chart)  
+  This is an example for a **custom Umbrella Chart**, to create a custom base chart with your **own environment defaults** to build your deployments upon. This is the next step after applying value files.
+
+
+
+# Configuration Options
+
+There are several possible ways to configure and customize the *nplus* helm charts:
+
+1. By using `--set` parameter at the command line:
+
+  ```
+  helm install \
+    --set components.rs=false \
+    --set components.mon=false \
+    --set components.nstl=false \
+    --set global.ingress.domain="demo.nplus.cloud" \
+    --set global.ingress.issuer="nplus-issuer" \
+    demo1 nplus/nplus-instance
+  ```
+
+  `kubectl get instances` will show this Instance being handled by `helm`.
+
+2. By adding one or more values files:
+
+  ```
+  helm install \
+      --values empty.yaml \
+      --values s3-env.yaml \
+      --values lab.yaml \
+      demo2 nplus/nplus-instance
+  ```
+
+3. By using `helm template` and piping the output to `kubectl`
+
+  ```
+  helm template \
+      --values empty.yaml \
+      --values s3-env.yaml \
+      --values lab.yaml \
+      demo2 nplus/nplus-instance      | kubectl apply -f -
+  ```
+
+  `kubectl get instances` will show this Instance being handled manually (`manual`).
+
+4. By building *Umbrella Charts* that contain default values for your environment
+
+
+
+# Using ArgoCD
+
+Deploying trough ArgoCD is identical to deploying trough Helm. Just use the `instance-argo` chart instead of `instance`.
+But you can use the same value files for all deployment methods. The `instance-argo` chart will render all values into the *argoCD Application*, taking them fully into account.
+
+If you deploy Instances by ArgoCD, `kubectl get instances` will show these Instance being handled by `argoCD`.
+
+
+
+# Stacking Values
+
+The sample value files provided here work for standard Instances as well as for argoCD Versions.
+
+The values Files are stacked:
+
+- `environment/demo.yaml` contains the default values for the environment
+- `empty/values.yaml` creates a sample document area in the *nscale Application Layer*
+- `s3/env.yaml` adds a S3 storage to the *nscale Storage Layer*, in form of simple environment variables
+
+This stack can be installed by using the `helm install` command:
+
+```
+helm install \
+    --values environment/demo.yaml \
+    --values empty/values.yaml \
+    --values s3/env.yaml \
+    empty-sample-s3 nplus/nplus-instance
+```
+
+The advantage of stacking is to separate and reuse parts of your configuration for different purposes.
+- Reuse values for different environments like stages or labs, where only the environment is different but the components and applications are (and have to be) the same
+- Use the same Storage Configuration for multiple Instances
+- Have one configuration for your Application / Solution and use that on many tenants to keep them all in sync
diff --git a/samples/application/README.md b/samples/application/README.md
new file mode 100644
index 0000000..9c3b030
--- /dev/null
+++ b/samples/application/README.md
@@ -0,0 +1,93 @@
+# Installing Document Areas
+
+## Creating an empty document area while deploying an Instance
+
+This is the simplest sample, just the core services with an empty document area:
+
+```
+helm install \
+  --values samples/application/empty.yaml \
+  --values samples/environment/demo.yaml \
+  empty nplus/nplus-instance
+```
+
+The empty Document Area is created with 
+
+```yaml
+components:
+  application: true
+  prepper: true
+  
+application:
+  docAreas:
+    - id: "Sample"
+  run:
+    - "/pool/downloads/sample.sh"
+
+prepper:
+  download:
+    - "https://git.nplus.cloud/public/nplus/raw/branch/master/assets/sample.tar.gz"
+```
+
+This turns on the *prepper* component, used to download a sample tarball from git. It will also extract the tarball into the `downloads` folder that is created on the *pool* automatically.
+
+Then, after the Application Layer is running, a document area `Sample` is created. The content of the sample script will be executed.
+
+If you use **argoCD** as deployment tool, you would go with
+
+```
+helm install \
+  --values samples/application/empty.yaml \
+  --values samples/environment/demo.yaml \
+  empty-argo nplus/nplus-instance-argo
+```
+
+
+
+## Deploying the *SBS* Apps to a new document area
+
+In the SBS scenario, some Apps are installed into the document area:
+
+```bash
+helm install \
+  --values samples/applications/sbs.yaml \
+  --values samples/environment/demo.yaml \
+  sbs nplus/nplus-instance
+```
+
+The values look like this:
+
+```yaml
+components:
+  application: true
+application:
+  nameOverride: SBS
+  docAreas:
+    - id: "SBS"
+      name: "DocArea with SBS"
+      description: "This is a sample DocArea with the SBS Apps installed"
+      apps:
+      - "/pool/nstore/bl-app-9.0.1202.zip"
+      - "/pool/nstore/gdpr-app-9.0.1302.zip"
+      ...
+      - "/pool/nstore/ts-app-9.0.1302.zip"
+      - "/pool/nstore/ocr-base-9.0.1302.zip"
+
+```
+
+This will create a document area `SBS` and install the SBS Apps into it.
+
+
+# Accounting in nstl
+
+To collect Accounting Data in *nscale Server Storage Layer*, you can enable the nstl accouting feature by setting `accounting: true`.
+This will create the accounting csv files in *ptemp* under `<instance>/<component>/accounting`.
+Additionally, you can enable a log forwarder printing it to stdout.
+
+```
+nstl:
+  accounting: true
+  logForwarder:
+    - name: Accounting
+      path: "/opt/ceyoniq/nscale-server/storage-layer/accounting/*.csv"
+```
diff --git a/samples/application/build.sh b/samples/application/build.sh
new file mode 100755
index 0000000..b151efc
--- /dev/null
+++ b/samples/application/build.sh
@@ -0,0 +1,80 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Set the Variables
+SAMPLE="empty"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/hid/values.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+
+# creating the Argo manifest
+mkdir -p $DEST/instance-argo
+helm template --debug \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/hid/values.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME-argo $CHARTS/instance-argo > $DEST/instance-argo/$SAMPLE-argo.yaml
+
+
+
+# Set the Variables
+SAMPLE="sbs"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/application/sbs.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+
+# creating the Argo manifest
+mkdir -p $DEST/instance-argo
+helm template --debug \
+     --values $SAMPLES/application/sbs.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME-argo $CHARTS/instance-argo > $DEST/instance-argo/$SAMPLE-argo.yaml
+
diff --git a/samples/application/empty.yaml b/samples/application/empty.yaml
new file mode 100644
index 0000000..85e284e
--- /dev/null
+++ b/samples/application/empty.yaml
@@ -0,0 +1,20 @@
+components:
+  application: true
+  prepper: true
+  
+application:
+  docAreas:
+    - id: "Sample"
+  run:
+    - "/pool/downloads/sample.sh"
+
+prepper:
+  download:
+    - "https://git.nplus.cloud/public/nplus/raw/branch/master/assets/sample.tar.gz"
+
+nstl:
+  accounting: true
+  logForwarder:
+    - name: Accounting
+      path: "/opt/ceyoniq/nscale-server/storage-layer/accounting/*.csv"
+      db: "/opt/ceyoniq/nscale-server/storage-layer/logsdb/logs.db"
diff --git a/samples/application/sbs.yaml b/samples/application/sbs.yaml
new file mode 100644
index 0000000..94c6047
--- /dev/null
+++ b/samples/application/sbs.yaml
@@ -0,0 +1,28 @@
+components:
+  application: true
+application:
+  nameOverride: SBS
+  docAreas:
+    - id: "SBS"
+      name: "DocArea with SBS"
+      description: "This is a sample DocArea with the SBS Apps installed"
+      apps:
+      - "/pool/nstore/bl-app-9.0.1202.zip"
+      - "/pool/nstore/gdpr-app-9.0.1302.zip"
+      - "/pool/nstore/sbs-base-9.0.1302.zip"
+      - "/pool/nstore/sbs-app-9.0.1302.zip"
+      - "/pool/nstore/tmpl-app-9.0.1302.zip"
+      - "/pool/nstore/cm-base-9.0.1302.zip"
+      - "/pool/nstore/cm-app-9.0.1302.zip"
+      - "/pool/nstore/hr-base-9.0.1302.zip"
+      - "/pool/nstore/hr-app-9.0.1302.zip"
+      - "/pool/nstore/pm-base-9.0.1302.zip"
+      - "/pool/nstore/pm-app-9.0.1302.zip"
+      - "/pool/nstore/sd-base-9.0.1302.zip"
+      - "/pool/nstore/sd-app-9.0.1302.zip"
+      - "/pool/nstore/kon-app-9.0.1302.zip"
+      - "/pool/nstore/kal-app-9.0.1302.zip"
+      - "/pool/nstore/dok-app-9.0.1302.zip"
+      - "/pool/nstore/ts-base-9.0.1302.zip"
+      - "/pool/nstore/ts-app-9.0.1302.zip"
+      - "/pool/nstore/ocr-base-9.0.1302.zip"
diff --git a/samples/blobstore/README.md b/samples/blobstore/README.md
new file mode 100644
index 0000000..538dd54
--- /dev/null
+++ b/samples/blobstore/README.md
@@ -0,0 +1,74 @@
+# Using Object Stores
+
+Blobstores aka Objectstores have a REST Interface that you can upload your Payload to and receive an ID for it. They are normally structured into *Buckets* or *Containers* to privide
+some sort of pooling payload within the store.
+
+The *nscale Server Storage Layer* supports multiple brands of objectstores, the most popular being Amazon S3 and Microsoft Azure Blobstore.
+
+In order to use them, you need to 
+- get an account for the store
+- configure the *nstl* with the url, credentials etc.
+- Add firewall rules to access to store
+
+Have a look at the sample files
+
+- s3-env.yaml  
+  for Amazon S3 compatible storage, and
+- azureblob.yaml  
+  for Azure Blobstore
+
+For S3 compatible storage, there are multiple S3 flavours available.
+
+
+
+# Custom Environment Variables
+
+There are multiple ways of how to set custom environment variables in addition to the named values, you set in helm:
+
+## Using `env`
+
+Please have a look at `s3-env.yaml` to see how custom environment variables can be injected into a component:
+
+```
+nstl:
+  env:
+    # Archivtyp
+    NSTL_ARCHIVETYPE_900_NAME: "S3"
+    NSTL_ARCHIVETYPE_900_ID: "900"
+    NSTL_ARCHIVETYPE_900_LOCALMIGRATION: "0"
+    NSTL_ARCHIVETYPE_900_LOCALMIGRATIONTYPE: "NONE"
+    NSTL_ARCHIVETYPE_900_S3MIGRATION: "1"
+```
+
+This will set the environment variables in the storage layer to add an archive type with id 900.
+
+
+## Using `envMap` and `envSecret`
+
+Alternatively to the standard `env`setting, you can also use configmaps and secrets for additional environment variables.
+
+The file `s3-envres.yaml` creates a configmap and a secret with the same variables as used in the `s3-env.yaml` sample. `s3-envfrom.yaml` shows how to import them. 
+
+Please be aware, that data in secrets need to be base64 encoded:
+
+```
+echo "xxx" | base64
+```
+
+So in order to use the envFrom mechanism,
+
+- prepare the resources (as in `s3-envres.yaml`)
+- upload the resources to your cluster
+  ```
+  kubectl apply -f s3-envres.yaml
+  ```
+- add it to your configuration
+  ```
+  nstl:
+    # These resources are set in the s3-envres.yaml sample file
+    # you can set single values (envMap or envSecret) or lists (envMaps or envSecrets)
+    envMaps:
+      - env-sample-archivetype
+      - env-sample-device
+    envSecret: env-sample-device-secret
+  ```
diff --git a/samples/blobstore/azureblob.yaml b/samples/blobstore/azureblob.yaml
new file mode 100644
index 0000000..7996862
--- /dev/null
+++ b/samples/blobstore/azureblob.yaml
@@ -0,0 +1,20 @@
+nstl:
+  env:
+    # global
+    NSTL_RETRIEVALORDER: "AZURE, HARDDISK_ADAPTER, REMOTE_EXPLICIT, REMOTE_DA"
+    # Archive Type
+    NSTL_ARCHIVETYPE_901_NAME: "AZUREBLOB"
+    NSTL_ARCHIVETYPE_901_ID: "901"
+    NSTL_ARCHIVETYPE_901_LOCALMIGRATION: "0"
+    NSTL_ARCHIVETYPE_901_LOCALMIGRATIONTYPE: "NONE"
+    NSTL_ARCHIVETYPE_901_AZUREMIGRATION: "1"
+    # Device
+    NSTL_AZURE_0_CONFIGURED: "1"
+    NSTL_AZURE_0_ARCHIVETYPES: "AZUREBLOB"
+    NSTL_AZURE_0_INDEX: "0"
+    NSTL_AZURE_0_NAME: "AZUREBLOB"
+    NSTL_AZURE_0_INITIALLYACTIVE: "1"
+    NSTL_AZURE_0_PERMANENTMIGRATION: "1"
+    NSTL_AZURE_0_CONTAINERNAME: "demostore"
+    NSTL_AZURE_0_ACCOUNTNAME: "xxx"
+    NSTL_AZURE_0_ACCOUNTKEY: "xxx"
diff --git a/samples/blobstore/s3-env.yaml b/samples/blobstore/s3-env.yaml
new file mode 100644
index 0000000..e578148
--- /dev/null
+++ b/samples/blobstore/s3-env.yaml
@@ -0,0 +1,23 @@
+nstl:
+  env:
+    # Archivtyp
+    NSTL_ARCHIVETYPE_900_NAME: "S3"
+    NSTL_ARCHIVETYPE_900_ID: "900"
+    NSTL_ARCHIVETYPE_900_LOCALMIGRATION: "0"
+    NSTL_ARCHIVETYPE_900_LOCALMIGRATIONTYPE: "NONE"
+    NSTL_ARCHIVETYPE_900_S3MIGRATION: "1"
+    # Device
+    NSTL_S3_0_CONFIGURED: "1"
+    NSTL_S3_0_ARCHIVETYPES: "S3"
+    NSTL_S3_0_INDEX: "0"
+    NSTL_S3_0_TYPE: "S3_COMPATIBLE"
+    NSTL_S3_0_NAME: "S3"
+    NSTL_S3_0_INITIALLYACTIVE: "1"
+    NSTL_S3_0_USESSL: "1"
+    NSTL_S3_0_VERIFYSSL: "0"
+    NSTL_S3_0_ACCESSID: "xxx"
+    NSTL_S3_0_SECRETKEY: "xxx"
+    NSTL_S3_0_ENDPOINT: "s3.nplus.cloud"
+    NSTL_S3_0_BUCKETNAME: "nstl"
+    NSTL_S3_0_USEVIRTUALADDRESSING: "0"
+    NSTL_S3_0_PERMANENTMIGRATION: "1"
\ No newline at end of file
diff --git a/samples/blobstore/s3-envfrom.yaml b/samples/blobstore/s3-envfrom.yaml
new file mode 100644
index 0000000..e7b09cc
--- /dev/null
+++ b/samples/blobstore/s3-envfrom.yaml
@@ -0,0 +1,7 @@
+nstl:
+  # These resources are set in the s3-envres.yaml sample file
+  # you can set single values (envMap or envSecret) or lists (envMaps or envSecrets)
+  envMaps:
+    - env-sample-archivetype
+    - env-sample-device
+  envSecret: env-sample-device-secret
diff --git a/samples/blobstore/s3-envres.yaml b/samples/blobstore/s3-envres.yaml
new file mode 100644
index 0000000..ba23953
--- /dev/null
+++ b/samples/blobstore/s3-envres.yaml
@@ -0,0 +1,40 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: env-sample-archivetype
+  namespace: lab
+data:
+  NSTL_ARCHIVETYPE_900_NAME: "S3"
+  NSTL_ARCHIVETYPE_900_ID: "900"
+  NSTL_ARCHIVETYPE_900_LOCALMIGRATION: "0"
+  NSTL_ARCHIVETYPE_900_LOCALMIGRATIONTYPE: "NONE"
+  NSTL_ARCHIVETYPE_900_S3MIGRATION: "1"
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: env-sample-device
+  namespace: lab
+data:
+  NSTL_S3_0_CONFIGURED: "1"
+  NSTL_S3_0_ARCHIVETYPES: "S3"
+  NSTL_S3_0_INDEX: "0"
+  NSTL_S3_0_TYPE: "S3_COMPATIBLE"
+  NSTL_S3_0_NAME: "S3"
+  NSTL_S3_0_INITIALLYACTIVE: "1"
+  NSTL_S3_0_USESSL: "1"
+  NSTL_S3_0_VERIFYSSL: "0"
+  NSTL_S3_0_ENDPOINT: "s3.nplus.cloud"
+  NSTL_S3_0_BUCKETNAME: "nstl"
+  NSTL_S3_0_USEVIRTUALADDRESSING: "0"
+  NSTL_S3_0_PERMANENTMIGRATION: "1"
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: env-sample-device-secret
+  namespace: lab
+type: Opaque
+data:
+  NSTL_S3_0_ACCESSID: eHh4Cg==
+  NSTL_S3_0_SECRETKEY: eHh4Cg==
diff --git a/samples/certificates/README.md b/samples/certificates/README.md
new file mode 100644
index 0000000..89b6975
--- /dev/null
+++ b/samples/certificates/README.md
@@ -0,0 +1,35 @@
+# (auto-) certificates and the pitfalls of *.this*
+
+*nplus* will automatically generate certificates for your ingress. It either uses an issuer like *cert-manager* or generates a *self-signed-certificate*.
+
+In your production environment though, you might want to take more control over the certificate generation process and don't leave it to *nplus* to automatically take care of it.
+In that case, you want to switch the automation *off*. 
+
+To do so, you need to understand what is happening internally:
+
+- if `.this.ingress.issuer` is set, the chart requests this issuer to generate a tls secret with the name `.this.ingress.secret`  
+  by creating a certificate resource with the name of the domain `.this.ingress.domain`
+- else, so no issuer is set, the chart checks wether the flag `.this.ingress.createSelfSignedCertificate` is set to `true` and
+  generates a tls secret with the name `.this.ingress.secret`
+- else, so neither issuer nor createSelfSignedCertificate are set, the charts will not generate anything
+
+The way how `.this` works is, that it gathers the key from `.Values.global.environment`, `.Values.global` and then `.Values` and flattens them merged into `.this`so that you can set your values 
+on different levels.
+
+However, the *merge* function overwrites non exising values and also boolean `true` overwrites a boolean `false`, not just the nil values. So to make sure we still can cancel functionality 
+by setting `null`or `false`, there is a forth merge which is set to forcefully overwrite existing keys: `override`, which can also be set on *environment*, *global* or on the *component* level.
+
+So the correct way to cancel the generation process is to force the issuer to null (which will cancel the *cert-manager* generation) and also force `createSelfSignedCertificate` to false (to cancel the *self-signed-certificate* generation):
+
+```yaml
+global:
+  override:
+    ingress:
+      enabled: true
+      secret: myCertificate
+      issuer: null
+      createSelfSignedCertificate: false
+```
+
+This makes sure, you will get an ingress, that uses the tls certificate in the secret `myCertificate` for encryption and does not generate anything.
+
diff --git a/samples/certificates/values.yaml b/samples/certificates/values.yaml
new file mode 100644
index 0000000..53e3733
--- /dev/null
+++ b/samples/certificates/values.yaml
@@ -0,0 +1,6 @@
+global:
+  ingress:
+    enabled: true
+    secret: mySecret
+    issuer: null
+    createSelfSignedCertificate: false
\ No newline at end of file
diff --git a/samples/chart/build.sh b/samples/chart/build.sh
new file mode 100755
index 0000000..212233e
--- /dev/null
+++ b/samples/chart/build.sh
@@ -0,0 +1,51 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Set the Variables
+SAMPLE="chart"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/chart/resources.yaml \
+     $NAME $SAMPLES/chart/tenant > $DEST/instance/$SAMPLE.yaml
+
+# Create the manifest - argo version
+mkdir -p $DEST/instance-argo
+helm template --debug \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/chart/resources.yaml \
+     $NAME-argo $SAMPLES/chart/tenant-argo > $DEST/instance-argo/$SAMPLE-argo.yaml
+
diff --git a/samples/chart/resources.yaml b/samples/chart/resources.yaml
new file mode 100644
index 0000000..5fd16a5
--- /dev/null
+++ b/samples/chart/resources.yaml
@@ -0,0 +1,170 @@
+instance:
+  web:
+    resources:
+      requests:
+        cpu: "10m"
+        memory: "1.5Gi"
+      limits:
+        cpu: "4000m"
+        memory: "4Gi"
+  prepper:
+    resources:
+      requests:
+        cpu: "10m"
+        memory: "128Mi"
+      limits:
+        cpu: "1000m"
+        memory: "128Mi"
+  application:
+    resources:
+      requests:
+        cpu: "10m"
+        memory: "1.5Gi"
+      limits:
+        cpu: "4000m"
+        memory: "4Gi"
+  nappl:
+    resources:
+      requests:
+        cpu: "10m"
+        memory: "1.5Gi"
+      limits:
+        cpu: "4000m"
+        memory: "4Gi"
+  nappljobs:
+    resources:
+      requests:
+        cpu: "10m"
+        memory: "2Gi"
+      limits:
+        cpu: "4000m"
+        memory: "4Gi"
+  administrator:
+    resources:
+      requests:
+        cpu: "2m"
+        memory: "512Mi"
+      limits:
+        cpu: "2000m"
+        memory: "2Gi"
+  cmis:
+    resources:
+      requests:
+        cpu: "2m"
+        memory: "512Mi"
+      limits:
+        cpu: "2000m"
+        memory: "2Gi"
+  database:
+    resources:
+      requests:
+        cpu: "2m"
+        memory: "256Mi"
+      limits:
+        cpu: "4000m"
+        memory: "8Gi"
+  ilm:
+    resources:
+      requests:
+        cpu: "2m"
+        memory: "256Mi"
+      limits:
+        cpu: "2000m"
+        memory: "2Gi"
+  mon:
+    resources:
+      requests:
+        cpu: "2m"
+        memory: "512Mi"
+      limits:
+        cpu: "2000m"
+        memory: "2Gi"
+  nstl:
+    resources:
+      requests:
+        cpu: "5m"
+        memory: "128Mi"
+      limits:
+        cpu: "2000m"
+        memory: "1Gi"
+  nstla:
+    resources:
+      requests:
+        cpu: "5m"
+        memory: "128Mi"
+      limits:
+        cpu: "2000m"
+        memory: "1Gi"
+  nstlb:
+    resources:
+      requests:
+        cpu: "5m"
+        memory: "128Mi"
+      limits:
+        cpu: "2000m"
+        memory: "1Gi"
+  nstlc:
+    resources:
+      requests:
+        cpu: "5m"
+        memory: "128Mi"
+      limits:
+        cpu: "2000m"
+        memory: "1Gi"
+  nstld:
+    resources:
+      requests:
+        cpu: "5m"
+        memory: "128Mi"
+      limits:
+        cpu: "2000m"
+        memory: "1Gi"
+  pam:
+    resources:
+      requests:
+        cpu: "5m"
+        memory: "512Mi"
+      limits:
+        cpu: "2000m"
+        memory: "1Gi"
+  rs:
+    resources:
+      requests:
+        cpu: "2m"
+        memory: "1Gi"
+      limits:
+        cpu: "4000m"
+        memory: "8Gi"
+  webdav:
+    resources:
+      requests:
+        cpu: "2m"
+        memory: "512Mi"
+      limits:
+        cpu: "2000m"
+        memory: "2Gi"
+
+  rms:
+    resources:
+      requests:
+        cpu: "2m"
+        memory: "128Mi"
+      limits:
+        cpu: "1000m"
+        memory: "512Mi"
+  rmsa:
+    resources:
+      requests:
+        cpu: "2m"
+        memory: "128Mi"
+      limits:
+        cpu: "1000m"
+        memory: "512Mi"
+  rmsb:
+    resources:
+      requests:
+        cpu: "2m"
+        memory: "128Mi"
+      limits:
+        cpu: "1000m"
+        memory: "512Mi"
diff --git a/samples/chart/tenant-argo/Chart.yaml b/samples/chart/tenant-argo/Chart.yaml
new file mode 100644
index 0000000..972865c
--- /dev/null
+++ b/samples/chart/tenant-argo/Chart.yaml
@@ -0,0 +1,12 @@
+apiVersion: v2
+name: sample-tenant-argo
+description: |
+  ArgoCD Version of the sample tenant chart. It demonstrates the use of umbrella
+  charts to customize default values for your environment or tenant templates.
+type: application
+dependencies:
+  - name: nplus-instance-argo
+    alias: instance-argo
+    version: "*-0"
+    repository: "file://../../../charts/instance-argo"
+version: 1.0.0
diff --git a/samples/chart/tenant-argo/README.md b/samples/chart/tenant-argo/README.md
new file mode 100644
index 0000000..32640aa
--- /dev/null
+++ b/samples/chart/tenant-argo/README.md
@@ -0,0 +1,93 @@
+
+
+# sample-tenant-argo
+
+ArgoCD Version of the sample tenant chart. It demonstrates the use of umbrella
+charts to customize default values for your environment or tenant templates.
+
+## sample-tenant-argo Chart Configuration
+
+You can customize / configure sample-tenant-argo by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+**global**&#8203;.meta&#8203;.isArgo |  |  `true` |
+**instance-argo**&#8203;.argocd&#8203;.chart |  |  `"sample-tenant"` |
+**instance-argo**&#8203;.argocd&#8203;.destinationServer |  |  `"https://kubernetes.default.svc"` |
+**instance-argo**&#8203;.argocd&#8203;.namespace |  |  `"argocd"` |
+**instance-argo**&#8203;.argocd&#8203;.project |  |  `"default"` |
+**instance-argo**&#8203;.argocd&#8203;.prune |  |  `true` |
+**instance-argo**&#8203;.argocd&#8203;.repo |  |  `"https://git.nplus.cloud"` |
+**instance-argo**&#8203;.argocd&#8203;.selfHeal |  |  `true` |
+
diff --git a/samples/chart/tenant-argo/values.schema.json b/samples/chart/tenant-argo/values.schema.json
new file mode 100644
index 0000000..475183e
--- /dev/null
+++ b/samples/chart/tenant-argo/values.schema.json
@@ -0,0 +1,112 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "global": {
+      "additionalProperties": false,
+      "properties": {
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "isArgo": {
+              "default": true,
+              "title": "isArgo",
+              "type": "boolean"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        }
+      },
+      "title": "global",
+      "type": "object"
+    },
+    "instance-argo": {
+      "description": "nplus Instance ArgoCD Edition, supporting the deployment of npus Instances through ArgoCD",
+      "properties": {
+        "argocd": {
+          "additionalProperties": false,
+          "description": "yaml-language-server: $schema=values.schema.json",
+          "properties": {
+            "chart": {
+              "default": "nplus-instance",
+              "description": "The name of the chart to use for the instance",
+              "title": "chart"
+            },
+            "destinationNamespace": {
+              "default": "{{ .Release.Namespace }}",
+              "description": "ArgoCD can deploy to any Namespace on the destination Server. You have to specify it. Default is the release namespace",
+              "title": "destinationNamespace"
+            },
+            "destinationServer": {
+              "default": "https://kubernetes.default.svc",
+              "description": "ArgoCD can also remote deploy Applications to alien clusters. The server specifies the API Endpoint of the Cluster, where the Application should be deployed",
+              "title": "destinationServer"
+            },
+            "namespace": {
+              "default": "argocd",
+              "description": "The ArgoCD Namespace within the cluster. The ArgoCD Application will be deployed to this namespace You will need write privileges for this namespace",
+              "title": "namespace"
+            },
+            "project": {
+              "default": "default",
+              "description": "ArgoCD organizes Applications in Projects. This is the name of the project, the application should be deployed to",
+              "title": "project"
+            },
+            "prune": {
+              "default": "true",
+              "description": "Toggle pruning for this Application",
+              "title": "prune"
+            },
+            "repo": {
+              "default": "https://git.nplus.cloud",
+              "description": "Specifiy the helm repo, from which ArgoCD should load the chart. Please make sure ArgoCD gets access rights to this repo",
+              "title": "repo"
+            },
+            "selfHeal": {
+              "default": "true",
+              "description": "Toggle self healing feature for this Application",
+              "title": "selfHeal"
+            }
+          },
+          "title": "argocd",
+          "type": "object"
+        },
+        "global": {
+          "additionalProperties": false,
+          "properties": {
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "isArgo": {
+                  "default": "true",
+                  "description": "specifies that this is an Argo Installation. Used to determine the correct handler in the chart @internal -- Do not change",
+                  "title": "isArgo"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            }
+          },
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        }
+      },
+      "title": "nplus-instance-argo",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/samples/chart/tenant-argo/values.yaml b/samples/chart/tenant-argo/values.yaml
new file mode 100644
index 0000000..aac8144
--- /dev/null
+++ b/samples/chart/tenant-argo/values.yaml
@@ -0,0 +1,13 @@
+# yaml-language-server: $schema=values.schema.json
+instance-argo:
+  argocd:
+    chart: sample-tenant
+    namespace: argocd
+    project: default
+    destinationServer: "https://kubernetes.default.svc"
+    selfHeal: true
+    prune: true
+    repo: "https://git.nplus.cloud"
+global:
+  meta:
+    isArgo: true
diff --git a/samples/chart/tenant/Chart.yaml b/samples/chart/tenant/Chart.yaml
new file mode 100644
index 0000000..c78e0fd
--- /dev/null
+++ b/samples/chart/tenant/Chart.yaml
@@ -0,0 +1,12 @@
+apiVersion: v2
+name: sample-tenant
+description: |
+  The sample tenant chart demonstrates how to use umbrella charts with default values,
+  e.g. to define tenant templates
+type: application
+dependencies:
+  - name: nplus-instance
+    alias: instance
+    version: "*-0"
+    repository: "file://../../../charts/instance"
+version: 1.0.0
diff --git a/samples/chart/tenant/README.md b/samples/chart/tenant/README.md
new file mode 100644
index 0000000..a9a2073
--- /dev/null
+++ b/samples/chart/tenant/README.md
@@ -0,0 +1,88 @@
+
+
+# sample-tenant
+
+The sample tenant chart demonstrates how to use umbrella charts with default values,
+e.g. to define tenant templates
+
+## sample-tenant Chart Configuration
+
+You can customize / configure sample-tenant by setting configuration values on the command line or in values files,
+that you can pass to helm. Please see the samples directory for details.
+
+In case there is no value set, the key will not be used in the manifest, resulting in values taken from the config files of the component.
+
+### Template Functions
+
+You can use template functions in the values files. If you do so, make sure you quote correctly (single quotes, if you have double quotes in the template,
+or escaped quotes).
+
+### Global Values
+
+All values can be set per component, per instance or globally per environment.
+
+Example: `global.ingress.domain` sets the domain on instance level. You can still set a different domain on a component, such as administrator.
+In that case, simply set `ingress.domain` for the administrator chart and that setting will have priority:
+
+- Prio 1 - Component Level: `ingress.domain`
+- Prio 2 - Instance Level: `global.ingress.domain`
+- Prio 3 - Environment Level: `global.environment.ingress.domain`
+
+### Using Values in Templates
+
+As it would be a lot of typing to write `.Values.ingress.domain | default .Values.global.ingress.domain | default .Values.global.environment.ingress.domain`in your
+template code, this is automatically done by nplus. You can simply type `.this.ingress.domain` and you will get a condensed and defaulted version
+of your Values.
+
+So an example in your `values.yaml` would be:
+
+```
+administrator:
+  waitFor:
+    - '-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:\{{ .this.nappl.port }} -timeout 600'
+```
+
+This example shows `.this.nappl.port` which might come from a component, instance or global setting. You do not need to care.
+The `.Release.Namespace` is set by helm. You have access to all Release and Chart Metadata, just like in your chart code.
+
+The `.component.prefix` is calculated by nplus and gives you some handy shortcuts to internal variables:
+
+- `.component.chartName` 
+  The name of the chart as in `.Chart.Name`, but with override by `.Values.nameOverride`
+- `.component.shortChartName` 
+  A shorter Version of the name - `nappl` instead of `nplus-component-nappl`
+- `.component.prefix` 
+  The instance Prefix used to name the resources including `-`. This prefix is dropped, if the
+  `.Release.Name` equals `.Release.Namespace` for those of you that only
+  run one nplus Instance per namespace
+- `.component.name` 
+  The name of the component, including `.Values.nameOverride` and some logic
+- `.component.fullName` 
+  The fullName inlcuding `.Values.fullnameOverride` and some logic
+- `.component.chart` 
+  Mainly the `Chart.Name` and `Chart.Version`
+- `.component.storagePath` 
+  The path where the component config is stored in the conf PVC
+- `.component.handler` 
+  The handler (either helm, argoCD or manual)
+
+- `.instance.name` 
+  The name of the instance, but with override by `.Values.instanceOverride`
+- `.instance.group` 
+  The group, this instance belongs to. Override by `.Values.groupOverride`
+- `.instance.version` 
+  The *nscale* version (mostly taken from Application Layer), this instance is deploying.
+
+- `.environment.name` 
+  The name of the environment, but with override by `.Values.environmentNameOverride`
+
+### Keys
+
+You can set any of the following values for this component:
+
+| Key | Description | Default |
+|-----|-------------|---------|
+**global**&#8203;.ingress&#8203;.domain |  |  `"{{ .instance.group | default .Release.Name }}.sample.nplus.cloud"` |
+**instance**&#8203;.application&#8203;.docAreas[0]&#8203;.id |  |  `"Sample"` |
+**instance**&#8203;.components&#8203;.application |  |  `true` |
+
diff --git a/samples/chart/tenant/values.schema.json b/samples/chart/tenant/values.schema.json
new file mode 100644
index 0000000..71483bb
--- /dev/null
+++ b/samples/chart/tenant/values.schema.json
@@ -0,0 +1,29293 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "global": {
+      "additionalProperties": false,
+      "properties": {
+        "ingress": {
+          "additionalProperties": false,
+          "properties": {
+            "domain": {
+              "default": "{{ .instance.group | default .Release.Name }}.sample.nplus.cloud",
+              "title": "domain",
+              "type": "string"
+            }
+          },
+          "title": "ingress",
+          "type": "object"
+        }
+      },
+      "title": "global",
+      "type": "object"
+    },
+    "instance": {
+      "description": "nplus Instance, an umbrella chart for orchestrating the components in a nplus Instance",
+      "properties": {
+        "administrator": {
+          "description": "nscale Administrator, providing the Web Version of the Administrator to be used in the Instance",
+          "properties": {
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "administrator",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1201",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/rapadm",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "-Dorg.eclipse.rap.rwt.settingStoreFactory=settings-per-user",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8080",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8443",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "administrator",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "administrator",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "/tmp",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "There should only be a single Administrator instance, so the replicaCount is fixed to 1 @ignore -- Do not change this.",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-administrator",
+          "type": "object"
+        },
+        "application": {
+          "description": "nplus Application, used to install Apps and Customizations into the nscale Application Layer.",
+          "properties": {
+            "docAreas": {
+              "default": "",
+              "description": "Provide a list of docareas to create. Please also see the example files",
+              "title": "docAreas"
+            },
+            "download": {
+              "default": "",
+              "description": "A list of URLs (Links) to Assets to download before anything else if the download is a .tar.gz, it is automatically untared to /pool/downloads",
+              "title": "download"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "application-layer",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1300.2024121814",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "yaml-language-server: $schema=values.schema.json",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "application",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/application",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "/pool",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "/tmp",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "nstl": {
+              "additionalProperties": false,
+              "properties": {
+                "host": {
+                  "default": "",
+                  "description": "The dns of the *nscale Server Storage Layer*. This is used to add it to the nappl configuration",
+                  "title": "host"
+                }
+              },
+              "title": "nstl",
+              "type": "object"
+            },
+            "prerun": {
+              "default": "",
+              "description": "A list of scripts to run before the deployment of Apps",
+              "title": "prerun"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "rs": {
+              "additionalProperties": false,
+              "properties": {
+                "host": {
+                  "default": "",
+                  "description": "The dns of the *nscale rendition Server*. This is used to add it to the nappl configuration",
+                  "title": "host"
+                }
+              },
+              "title": "rs",
+              "type": "object"
+            },
+            "run": {
+              "default": "",
+              "description": "A list of scripts to run after the deployment of Apps",
+              "title": "run"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-application",
+          "type": "object"
+        },
+        "backend": {
+          "description": "Installs Namespace-Wide Resources such as the conf PVC and the ptemp PVC",
+          "properties": {
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "storage": {
+              "additionalProperties": false,
+              "description": "yaml-language-server: $schema=values.schema.json",
+              "properties": {
+                "conf": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "name": {
+                      "default": "",
+                      "description": "this is the name of the common config storage. please see section \"Storage\" for more information",
+                      "title": "name"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "this is the size of the common config storage. please see section \"Storage\" for more information",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "conf",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "name": {
+                      "default": "",
+                      "description": "this is the name of the common persistant temp storage. please see section \"Storage\" for more information",
+                      "title": "name"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "this is the size of the common ptemp storage. please see section \"Storage\" for more information",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "you can set the volumeName to the value of a pre-existing volume to avoid having the PV created for you by the csi driver provisioner",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "ptemp",
+                  "type": "object"
+                }
+              },
+              "title": "storage",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            }
+          },
+          "title": "nplus-environment-backend",
+          "type": "object"
+        },
+        "cmis": {
+          "description": "nscale CMIS Connector, provides a CMIS Interface to the Instance",
+          "properties": {
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "cmis-connector",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1200.2024112508",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/cmis",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8096",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8196",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "cmis-connector",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "cmis",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCount": {
+              "default": "",
+              "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+              "title": "minReplicaCount"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-cmis-connector/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-cmis-connector/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-cmis-connector/temp",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "updateStrategy": {
+              "default": "",
+              "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+              "title": "updateStrategy"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-cmis",
+          "type": "object"
+        },
+        "components": {
+          "additionalProperties": false,
+          "description": "yaml-language-server: $schema=values.schema.json",
+          "properties": {
+            "administrator": {
+              "default": "false",
+              "description": "enable a *nscale Administrator Web* component in this instance",
+              "title": "administrator"
+            },
+            "application": {
+              "default": "false",
+              "description": "deploy any solution using GBA, Standard Apps or shell copy with this generic deployment chart",
+              "title": "application"
+            },
+            "cmis": {
+              "default": "false",
+              "description": "enable a *nscale CMIS Connector* component in this instance",
+              "title": "cmis"
+            },
+            "database": {
+              "default": "true",
+              "description": "enable an internal *Postgres Database* in this instance",
+              "title": "database"
+            },
+            "dmsapi": {
+              "default": false,
+              "description": "TODO: remove",
+              "title": "dmsapi",
+              "type": "boolean"
+            },
+            "erpcmis": {
+              "default": "false",
+              "description": "enable a *nscale ERP CMIS Connector* component in this instance",
+              "title": "erpcmis"
+            },
+            "erpproxy": {
+              "default": "false",
+              "description": "enable a *nscale ERP Proxy Connector* component in this instance",
+              "title": "erpproxy"
+            },
+            "ilm": {
+              "default": "false",
+              "description": "enable a *nscale ILM Connector* component in this instance",
+              "title": "ilm"
+            },
+            "mon": {
+              "default": "false",
+              "description": "enable a *nscale Monitoring Console* component in this instance",
+              "title": "mon"
+            },
+            "nappl": {
+              "default": "true",
+              "description": "enable a consumer *nscale Application Layer* component in this instance",
+              "title": "nappl"
+            },
+            "nappljobs": {
+              "default": "false",
+              "description": "enable a dedicated jobs *nscale Application Layer* component in this instance please also make sure to set the *jobs* setting",
+              "title": "nappljobs"
+            },
+            "nstl": {
+              "default": "true",
+              "description": "enable a *nscale Server Storage Layer* component in this instance If you are in a **High Availability** scenario, disable this",
+              "title": "nstl"
+            },
+            "nstla": {
+              "default": "false",
+              "description": "enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario.",
+              "title": "nstla"
+            },
+            "nstlb": {
+              "default": "false",
+              "description": "enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario.",
+              "title": "nstlb"
+            },
+            "nstlc": {
+              "default": "false",
+              "description": "enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario.",
+              "title": "nstlc"
+            },
+            "nstld": {
+              "default": "false",
+              "description": "enable an additional *nscale Server Storage Layer* node in this instance within a **High Availability** scenario.",
+              "title": "nstld"
+            },
+            "pam": {
+              "default": "false",
+              "description": "enable a *nscale Process Automation Modeler* component in this instance",
+              "title": "pam"
+            },
+            "pipeliner": {
+              "default": "false",
+              "description": "enable *nscale Pipeliner* component in this instance",
+              "title": "pipeliner"
+            },
+            "prepper": {
+              "default": "false",
+              "description": "download, deploy and run any git asset or script prior to installation of the components",
+              "title": "prepper"
+            },
+            "rms": {
+              "default": "false",
+              "description": "enable a *nplus Remote Management Server* component in this instance If you are in a **High Availability** scenario, disable this",
+              "title": "rms"
+            },
+            "rmsa": {
+              "default": "false",
+              "description": "enable an additional *nplus Remote Management Server* in this instance within a **High Availability** scenario.",
+              "title": "rmsa"
+            },
+            "rmsb": {
+              "default": "false",
+              "description": "enable an additional *nplus Remote Management Server* in this instance within a **High Availability** scenario.",
+              "title": "rmsb"
+            },
+            "rs": {
+              "default": "true",
+              "description": "enable a *nscale Rendition Server* component in this instance",
+              "title": "rs"
+            },
+            "sharepoint": {
+              "default": "false",
+              "description": "enable a *nscale Sharepoint Connector* component in this instance",
+              "title": "sharepoint"
+            },
+            "sharepointa": {
+              "default": "false",
+              "description": "enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters",
+              "title": "sharepointa"
+            },
+            "sharepointb": {
+              "default": "false",
+              "description": "enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters",
+              "title": "sharepointb"
+            },
+            "sharepointc": {
+              "default": "false",
+              "description": "enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters",
+              "title": "sharepointc"
+            },
+            "sharepointd": {
+              "default": "false",
+              "description": "enable an additional *nscale Sharepoint Connector* component in this instance for another set of configuration parameters",
+              "title": "sharepointd"
+            },
+            "sim": {
+              "additionalProperties": false,
+              "description": "This section is for the single-instance-mode in which all environement components are integrated into the instance",
+              "properties": {
+                "backend": {
+                  "default": "false",
+                  "description": "This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. the backend components holds the common storages / PVCs for conf and ptemp umong other common environmental resources",
+                  "title": "backend"
+                },
+                "dav": {
+                  "default": "false",
+                  "description": "This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. DAV gives you WebDAV access to your conf and ptemp volumes",
+                  "title": "dav"
+                },
+                "operator": {
+                  "default": "false",
+                  "description": "This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. The Operator will let you query the Custom Resources for nscale, e.g. `kubectl get nscale`",
+                  "title": "operator"
+                },
+                "toolbox": {
+                  "default": "false",
+                  "description": "This is for *Single-Instance-Mode* **only**. Read the docu before enabling this. the toolbox has a git client installed and is suitable for pulling, pushing, copying  stuff into the pool, fonts, certificates, snippets and configuration files",
+                  "title": "toolbox"
+                }
+              },
+              "title": "sim"
+            },
+            "web": {
+              "default": "true",
+              "description": "enable a *nscale Web* component in this instance",
+              "title": "web"
+            },
+            "webdav": {
+              "default": "false",
+              "description": "enable a *nscale WebDAV Connector* component in this instance",
+              "title": "webdav"
+            }
+          },
+          "title": "components",
+          "type": "object"
+        },
+        "database": {
+          "description": "Postgres Database, deploys a DEV or TESTING environment DB",
+          "properties": {
+            "database": {
+              "additionalProperties": false,
+              "properties": {
+                "account": {
+                  "default": "nscale",
+                  "description": "the technical account to own the nscale database, if not set by secret",
+                  "title": "account"
+                },
+                "name": {
+                  "default": "nscale",
+                  "description": "name of the nscale database",
+                  "title": "name"
+                },
+                "password": {
+                  "default": "nscale",
+                  "description": "password of the technical account, if not set by secret",
+                  "title": "password"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "the secret with credentials (account, password) for the nscale technical account. This setting has priority over account and password",
+                  "title": "secret"
+                }
+              },
+              "title": "database",
+              "type": "object"
+            },
+            "dbAdmin": {
+              "additionalProperties": false,
+              "properties": {
+                "account": {
+                  "default": "postgres",
+                  "description": "the database admin account, if not set by secret",
+                  "title": "account"
+                },
+                "password": {
+                  "default": "postgres",
+                  "description": "the database admin password, if not set by secret",
+                  "title": "password"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "the secret with credentials (account, password) for the database admin account. This setting has priority over adminAccount and adminPassword",
+                  "title": "secret"
+                }
+              },
+              "title": "dbAdmin",
+              "type": "object"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "bitnami/postgresql",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "default": "",
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "15",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "yaml-language-server: $schema=values.schema.json",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "5432",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "database",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/bitnami/postgresql/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "30Gi",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "priority": {
+              "additionalProperties": false,
+              "description": "You can give a component a specific priorityClass to implement a quality of service. You can leave this empty, then no priority is set. If you set a class, this class is taken If you additionally enable create, the class is created for you with the value defined.",
+              "properties": {
+                "className": {
+                  "default": "",
+                  "description": "Set the priority class for the Application Layer deployment if desired",
+                  "title": "className"
+                },
+                "createClass": {
+                  "default": "",
+                  "description": "Creates an individual PriorityClass for this instance",
+                  "title": "createClass"
+                },
+                "value": {
+                  "default": "1000000",
+                  "description": "Sets the priorityValue",
+                  "title": "value"
+                }
+              },
+              "title": "priority"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "The replicaCount for the Database should never be changed @ignore",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            }
+          },
+          "title": "nplus-component-database",
+          "type": "object"
+        },
+        "dav": {
+          "description": "Provides WebDAV access to environment resources such as the conf PVC and the ptemp PVC",
+          "properties": {
+            "account": {
+              "default": "admin",
+              "description": "the dav user",
+              "title": "account"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "toolbox2",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "cr.nplus.cloud/subscription",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "1.2.1300",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/dav",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8080",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8443",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "envdav",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "password": {
+              "default": "admin",
+              "description": "password of the dav user",
+              "title": "password"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "1",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "512Mi",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "1m",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "64Mi",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "secret": {
+              "default": "",
+              "description": "Alternatively, define a secret",
+              "title": "secret"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            }
+          },
+          "title": "nplus-environment-dav",
+          "type": "object"
+        },
+        "dmsapi": {
+          "description": "eon DMS-API provides a eon Standard Interface to the Instance",
+          "properties": {
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "dms-api",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "cr.nplus.cloud/subscription",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "9.2.1200",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/dms_api",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "9443",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "dms-api",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "dmsapi",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCount": {
+              "default": "",
+              "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+              "title": "minReplicaCount"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/tomcat/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/tomcat/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "updateStrategy": {
+              "default": "",
+              "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+              "title": "updateStrategy"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "eon-dms-api",
+          "type": "object"
+        },
+        "erpcmis": {
+          "description": "nscale ERP CMIS, providing SAP S/4 HANA Public Cloud Archive Access",
+          "properties": {
+            "alien": {
+              "additionalProperties": false,
+              "properties": {
+                "doAppend": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "doAppend"
+                },
+                "port": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "port"
+                },
+                "server": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "server"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "ssl"
+                },
+                "url": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "url"
+                },
+                "useSign": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "useSign"
+                }
+              },
+              "title": "alien",
+              "type": "object"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "erp-cmis-connector",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.2.1000.2024032720",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/cmis/browser",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8096",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8196",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "erpcmis-connector",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "erpcmis",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "migration": {
+              "additionalProperties": false,
+              "properties": {
+                "checkDocuments": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "checkDocuments"
+                },
+                "checkIgnoreTime": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "checkIgnoreTime"
+                },
+                "delay": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "delay"
+                },
+                "doListMigration": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "doListMigration"
+                },
+                "enabled": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "enabled"
+                },
+                "fileDelimiter": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "fileDelimiter"
+                },
+                "viaFileSystem": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "viaFileSystem"
+                }
+              },
+              "title": "migration",
+              "type": "object"
+            },
+            "minReplicaCount": {
+              "default": "",
+              "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+              "title": "minReplicaCount"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-for-sap/erp-cmis/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-for-sap/erp-cmis/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-for-sap/erp-cmis/temp",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "sign": {
+              "additionalProperties": false,
+              "properties": {
+                "authID": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "authID"
+                },
+                "keyAlias": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "keyAlias"
+                },
+                "keyPassword": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "keyPassword"
+                }
+              },
+              "title": "sign",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "updateStrategy": {
+              "default": "",
+              "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+              "title": "updateStrategy"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            },
+            "xsap": {
+              "additionalProperties": false,
+              "properties": {
+                "useSign": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp cmis image by *Ceyoniq*",
+                  "title": "useSign"
+                }
+              },
+              "title": "xsap",
+              "type": "object"
+            }
+          },
+          "title": "nplus-component-erpcmis",
+          "type": "object"
+        },
+        "erpproxy": {
+          "description": "nscale ERP Proxy, providing SAP Archive Link access to alien Archive Components",
+          "properties": {
+            "alien": {
+              "additionalProperties": false,
+              "properties": {
+                "doAppend": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "doAppend"
+                },
+                "port": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "port"
+                },
+                "server": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "server"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "ssl"
+                },
+                "url": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "url"
+                },
+                "useSign": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "useSign"
+                }
+              },
+              "title": "alien",
+              "type": "object"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "sap-proxy-connector",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/pre-release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1000.2024092409",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/sap_proxy",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8097",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8197",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "erpproxy-connector",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "erpproxy",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "migration": {
+              "additionalProperties": false,
+              "properties": {
+                "checkDocuments": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "checkDocuments"
+                },
+                "checkIgnoreTime": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "checkIgnoreTime"
+                },
+                "delay": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "delay"
+                },
+                "doListMigration": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "doListMigration"
+                },
+                "enabled": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "enabled"
+                },
+                "fileDelimiter": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "fileDelimiter"
+                },
+                "viaFileSystem": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "viaFileSystem"
+                }
+              },
+              "title": "migration",
+              "type": "object"
+            },
+            "minReplicaCount": {
+              "default": "",
+              "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+              "title": "minReplicaCount"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-for-sap/sap-proxy/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-for-sap/sap-proxy/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-for-sap/sap-proxy/temp",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "sign": {
+              "additionalProperties": false,
+              "properties": {
+                "authID": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "authID"
+                },
+                "keyAlias": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "keyAlias"
+                },
+                "keyPassword": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "keyPassword"
+                }
+              },
+              "title": "sign",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "updateStrategy": {
+              "default": "",
+              "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+              "title": "updateStrategy"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            },
+            "xsap": {
+              "additionalProperties": false,
+              "properties": {
+                "url": {
+                  "default": "{{ printf \"%s/%s\" ($.this.nappl).instance \"xsap/cs/xsap\"}}",
+                  "description": "xsap url to use.",
+                  "title": "url"
+                },
+                "useSign": {
+                  "default": "",
+                  "description": "Documentation pending until official release of the erp proxy image by *Ceyoniq*",
+                  "title": "useSign"
+                }
+              },
+              "title": "xsap",
+              "type": "object"
+            }
+          },
+          "title": "nplus-component-erpproxy",
+          "type": "object"
+        },
+        "global": {
+          "additionalProperties": false,
+          "properties": {
+            "database": {
+              "additionalProperties": false,
+              "properties": {
+                "account": {
+                  "default": "nscale",
+                  "description": "DB account (if not using a secret)",
+                  "title": "account"
+                },
+                "dialect": {
+                  "default": "PostgreSQL",
+                  "description": "nscale DB server dialect",
+                  "title": "dialect"
+                },
+                "driverclass": {
+                  "default": "org.postgresql.Driver",
+                  "description": "nscale DB server driverclass",
+                  "title": "driverclass"
+                },
+                "name": {
+                  "default": "nscale",
+                  "description": "name of the nscale DB",
+                  "title": "name"
+                },
+                "password": {
+                  "default": "nscale",
+                  "description": "DB password (if not using a secret)",
+                  "title": "password"
+                },
+                "passwordEncoded": {
+                  "default": "false",
+                  "description": "weather the password is stored encrypted",
+                  "title": "passwordEncoded"
+                },
+                "schema": {
+                  "default": "public",
+                  "description": "DB schema name",
+                  "title": "schema"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "DB credential secret (account, password)",
+                  "title": "secret"
+                },
+                "url": {
+                  "default": "jdbc:postgresql://{{ .component.prefix }}database:5432/{{ .this.database.name }}",
+                  "description": "The URL to the database",
+                  "title": "url"
+                }
+              },
+              "title": "database",
+              "type": "object"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "properties": {
+                "appRoot": {
+                  "default": "/nscale_web",
+                  "description": "Sets the root for this instance, where incoming root traffic should be redirected to",
+                  "title": "appRoot"
+                },
+                "class": {
+                  "default": "`public``",
+                  "description": "sets the global ingressclass for all components to use - if they do not define a specific one, for example if there are separate controllers for internal and external traffic",
+                  "title": "class"
+                },
+                "createSelfSignedCertificate": {
+                  "default": "true",
+                  "description": "if you do not define an issuer to generate the tls secret for you, you still can have a self signed certificate generated for you, if you set this to true. The default is true, so either you have an issuer or not, you will always end up with a certificate. Set an empty issuer and createSelfSignedCertificate to false to have no certificate generated and use an external or existing secret. Then make sure the secret matches.",
+                  "title": "createSelfSignedCertificate"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the global domain within the instance to be used, if the component does not define any domain. If this remains empty, no ingress is generated Example: `{{ .instance.group }}.lab.nplus.cloud`",
+                  "title": "domain"
+                },
+                "issuer": {
+                  "default": "",
+                  "description": "Sets the name of the issuer to create the tls secret. Very common is to have it created by  cert-manager. Please see the documentation how to create a cert-manager cluster issuer for example. If no issuer is set, no certificate request will be generated",
+                  "title": "issuer"
+                },
+                "namespace": {
+                  "default": "`ingress, kube-system, ingress-nginx`",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. This secret is then either generated by cert-manager or self signed by helm - or not created",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress",
+              "type": "object"
+            },
+            "instance": {
+              "additionalProperties": false,
+              "properties": {
+                "group": {
+                  "default": "",
+                  "description": "The group of the instance. This is used for the networkPolicies. Only Pods within one group are allowed to communicate if you enable the nplus Network Policies. By default, this is set the same as the instance name",
+                  "title": "group"
+                },
+                "name": {
+                  "default": "{{ .Release.Name }}",
+                  "description": "The name of the instance. Should this name be identical to the namespace name, then  the prefix will be dropped. By default, this is the .Release.Name",
+                  "title": "name"
+                }
+              },
+              "title": "instance",
+              "type": "object"
+            },
+            "license": {
+              "default": "nscale-license",
+              "description": "Globally set the license secret name",
+              "title": "license"
+            },
+            "logForwarderImage": {
+              "additionalProperties": false,
+              "properties": {
+                "name": {
+                  "default": "fluent-bit",
+                  "description": "defines the nplus toolbox name to be used for the *wait* feature",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "description": "defines the nplus toolbox pull policy to be used for the *wait* feature",
+                  "title": "pullPolicy"
+                },
+                "repo": {
+                  "default": "cr.fluentbit.io/fluent",
+                  "description": "defines the nplus toolbox image to be used for the *wait* feature",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "2.0",
+                  "description": "defines the tag for the logforwarder (FluentBit) @internal -- set by devOps pipeline, so do not modify",
+                  "title": "tag"
+                }
+              },
+              "title": "logForwarderImage",
+              "type": "object"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "nscaleVersion": {
+                  "default": "9.3.1300",
+                  "description": "Sets the nscale version of this deployment / instance. This is used by the operator to display the correct version e.g. in the Web UI. @internal -- this is set by the devOps pipeline, so do not modify",
+                  "title": "nscaleVersion"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "properties": {
+                "account": {
+                  "default": "admin",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "domain": {
+                  "default": "nscale",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "{{ .component.prefix }}nappl.{{ .Release.Namespace }}",
+                  "description": "sets the *nscale Server Application Layer* host to be used. As this is a global option, it can be overridden at component level.",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "nscalealinst1",
+                  "description": "the instance of *nscale Server Application Layer* to be used @internal -- As this is depricated for nscale 10, you should never modify this.",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "admin",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "8080",
+                  "description": "sets the *nscale Server Application Layer* port to be used. As this is a global option, it can be overridden at component level. if you switch to zero trus mode or change the nappl backend to https, you want to modify this port to 8443",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "false",
+                  "description": "wether to use ssl or not for the advanced connector",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl",
+              "type": "object"
+            },
+            "security": {
+              "additionalProperties": false,
+              "properties": {
+                "cni": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "administratorInstance": {
+                      "default": "{{ .this.instance.name }}",
+                      "description": "sets the instance, from which Administration is allowed",
+                      "title": "administratorInstance"
+                    },
+                    "administratorNamespace": {
+                      "default": "{{ .Release.Namespace }}",
+                      "description": "sets the namespace, from which Administration is allowed",
+                      "title": "administratorNamespace"
+                    },
+                    "createNetworkPolicy": {
+                      "default": "",
+                      "description": "creates NetworkPolicies for each  component.",
+                      "title": "createNetworkPolicy"
+                    },
+                    "defaultEgressPolicy": {
+                      "default": "",
+                      "description": "if defined, creates a default NetworkPolicy to handle  egress Traffic from the instance. Possible Values: deny, allow, none",
+                      "title": "defaultEgressPolicy"
+                    },
+                    "defaultIngressPolicy": {
+                      "default": "",
+                      "description": "if defined, creates a default NetworkPolicy to handle  ingress Traffic to the instance. Possible Values: deny, allow, none",
+                      "title": "defaultIngressPolicy"
+                    },
+                    "monitoringInstance": {
+                      "default": "{{ .this.instance.name }}",
+                      "description": "sets the instance, from which Monitoring is allowed",
+                      "title": "monitoringInstance"
+                    },
+                    "monitoringNamespace": {
+                      "default": "{{ .Release.Namespace }}",
+                      "description": "sets the namespace, from which Monitoring is allowed",
+                      "title": "monitoringNamespace"
+                    },
+                    "pamInstance": {
+                      "default": "{{ .this.instance.name }}",
+                      "description": "sets the instance, from which Process Automation Modeling is allowed",
+                      "title": "pamInstance"
+                    },
+                    "pamNamespace": {
+                      "default": "{{ .Release.Namespace }}",
+                      "description": "sets the namespace, from which Process Automation Modeling is allowed",
+                      "title": "pamNamespace"
+                    }
+                  },
+                  "title": "cni",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "",
+                  "description": "enables zero trust on the instance. When enabled, no unencrypted http connection is allowed. This will remove all http ports from pods, services, network policies and ingress rules",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "if you use a OpenTelemetry as a telemetry collector, you can enable it here. This will add the annotations to some known pods for the injector to use agents inside the pods for telemetry collection.  This often goes along with the `language` setting in the meta section to tell the  telemetry collector which agent to inject.",
+                  "title": "openTelemetry"
+                }
+              },
+              "title": "telemetry",
+              "type": "object"
+            },
+            "waitImage": {
+              "additionalProperties": false,
+              "properties": {
+                "name": {
+                  "default": "toolbox2",
+                  "description": "defines the nplus toolbox name to be used for the *wait* feature",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "description": "defines the nplus toolbox pull policy to be used for the *wait* feature",
+                  "title": "pullPolicy"
+                },
+                "repo": {
+                  "default": "cr.nplus.cloud/subscription",
+                  "description": "defines the nplus toolbox image to be used for the *wait* feature",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "1.2.1300",
+                  "description": "defines the nplus toolbox tag to be used for the *wait* feature @internal -- set by devOps pipeline, so do not modify",
+                  "title": "tag"
+                }
+              },
+              "title": "waitImage",
+              "type": "object"
+            }
+          },
+          "title": "global",
+          "type": "object"
+        },
+        "globals": {
+          "description": "nplus Global Functions Library Chart",
+          "properties": {
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            }
+          },
+          "title": "nplus-globals",
+          "type": "object"
+        },
+        "ilm": {
+          "description": "nscale ILM Connector, providing a certified SAP ILM interface",
+          "properties": {
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "ilm-connector",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1000.2024091702",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/sap_ilm",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8297",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8397",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "ilm-connector",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "ilm",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCount": {
+              "default": "",
+              "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+              "title": "minReplicaCount"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-for-sap/erp-connector-ilm/temp",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "updateStrategy": {
+              "default": "",
+              "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+              "title": "updateStrategy"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-ilm",
+          "type": "object"
+        },
+        "meta": {
+          "additionalProperties": false,
+          "properties": {
+            "provider": {
+              "default": "",
+              "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+              "title": "provider"
+            },
+            "tenant": {
+              "default": "",
+              "description": "sets tenant information to be able to invoice per use in a cloud environment",
+              "title": "tenant"
+            }
+          },
+          "title": "meta",
+          "type": "object"
+        },
+        "mon": {
+          "description": "nscale Monitoring Console, used to provide sensor information from all components to dashboards",
+          "properties": {
+            "activateRmi": {
+              "default": "false",
+              "description": "Activates the RMI Interface. Due to security concern, this defaults to `false`",
+              "title": "activateRmi"
+            },
+            "activateSsl": {
+              "default": "true",
+              "description": "Activates SSL / TLS communication",
+              "title": "activateSsl"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "monitoring-console",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1000.2024092618",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/nscalemc",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8387",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8388",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "8389",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "monitoring-console",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "mon",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-monitoring/workspace",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "10Gi",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-monitoring/workspace/license.xml",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "There should only be a single Monitoring instance, so the replicaCount is fixed to 1 @ignore -- Do not change this.",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-mon",
+          "type": "object"
+        },
+        "nappl": {
+          "description": "nscale Server Application Layer, the central component in the nscale ecosystem",
+          "properties": {
+            "database": {
+              "additionalProperties": false,
+              "description": "If you define the database in your values, this DB settings are taken. If you leave this empty, the settings from the config file are used.",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "alternative 1: the account name of the technical DB user for nscale",
+                  "title": "account"
+                },
+                "dialect": {
+                  "default": "",
+                  "description": "the database dialect to use",
+                  "title": "dialect"
+                },
+                "driverclass": {
+                  "default": "",
+                  "description": "the driver class to use",
+                  "title": "driverclass"
+                },
+                "name": {
+                  "default": "",
+                  "description": "the name of the database to use",
+                  "title": "name"
+                },
+                "password": {
+                  "default": "",
+                  "description": "alternative 1: the password of the technical DB user for nscale",
+                  "title": "password"
+                },
+                "passwordEncoded": {
+                  "default": "",
+                  "description": "weather the DB password is stored encrypted",
+                  "title": "passwordEncoded"
+                },
+                "schema": {
+                  "default": "",
+                  "description": "the database schema to use",
+                  "title": "schema"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "alternative 2: use a secret for the account and password",
+                  "title": "secret"
+                },
+                "url": {
+                  "default": "",
+                  "description": "the DB URL",
+                  "title": "url"
+                }
+              },
+              "title": "database"
+            },
+            "disableSessionReplication": {
+              "default": "",
+              "description": "enables/disables the session replication for these cluster members.",
+              "title": "disableSessionReplication"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "application-layer",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1300.2024121814",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/nscalealinst1",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "includeDefaultPaths": {
+                  "default": "true",
+                  "description": "toggles default paths like index.html, res and engine.properties",
+                  "title": "includeDefaultPaths"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "jobs": {
+              "default": "true",
+              "description": "enables/disables the job affinity / priority for these cluster members",
+              "title": "jobs"
+            },
+            "kubePing": {
+              "additionalProperties": false,
+              "description": "sets the serviceAccount for NAPPL. Up to 9.1.1100, this was needed for  the cluster communication (kubePing). Starting 9.1.1201, this is not the case any more If it is left empty, also the automountServiceAccountToken is disabled. If you set Values, they are ignored in Versions > 9.1.1200",
+              "properties": {
+                "create": {
+                  "default": "true",
+                  "description": "Creates the ServiceAccount (only if Version < 9.1.1200) Later Versions use a Cluster Service and resolve the IP Adresses from the EndpointSlices",
+                  "title": "create"
+                },
+                "name": {
+                  "default": "{{ .component.fullName }}-kubeping",
+                  "description": "Set the ServiceAccount Name for the kubePing Protocol",
+                  "title": "name"
+                }
+              },
+              "title": "kubePing"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8080",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8443",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "application-layer",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "core",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCount": {
+              "default": "",
+              "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+              "title": "minReplicaCount"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/application-layer/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "/usr/share/fonts/truetype/nplus",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/application-layer/conf/license.xml",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/application-layer/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "5Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "additionalProperties": false,
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "priority": {
+              "additionalProperties": false,
+              "description": "You can give a component a specific priorityClass to implement a quality of service. You can leave this empty, then no priority is set. If you set a class, this class is taken If you additionally enable create, the class is created for you with the value defined.",
+              "properties": {
+                "className": {
+                  "default": "",
+                  "description": "Set the priority class for the Application Layer deployment if desired",
+                  "title": "className"
+                },
+                "createClass": {
+                  "default": "true",
+                  "description": "Creates an individual PriorityClass for this instance",
+                  "title": "createClass"
+                },
+                "value": {
+                  "default": "1000000",
+                  "description": "Sets the priorityValue",
+                  "title": "value"
+                }
+              },
+              "title": "priority"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "cni": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "dbIpRange": {
+                      "default": "",
+                      "description": "defines the IP Range of out-of-cluster DB Servers, that the nappl is allowed to communicate with.",
+                      "title": "dbIpRange"
+                    },
+                    "sapIpRange": {
+                      "default": "",
+                      "description": "defines the IP Range of out-of-cluster SAP Servers, that the nappl is allowed to communicate with.",
+                      "title": "sapIpRange"
+                    }
+                  },
+                  "title": "cni",
+                  "type": "object"
+                },
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "sessionCacheStorageType": {
+              "default": "",
+              "description": "Sets the Session Cache Storage Type to HEAP or OFF_HEAP",
+              "title": "sessionCacheStorageType"
+            },
+            "snc": {
+              "additionalProperties": false,
+              "properties": {
+                "enabled": {
+                  "default": "false",
+                  "description": "Enables the NAPPL SNC to access SAP Systems. Since nscale 8, the configuration is done in the Administration Client.",
+                  "title": "enabled"
+                }
+              },
+              "title": "snc",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "description": "Set tolerations for this component",
+              "items": {},
+              "title": "tolerations"
+            },
+            "updateStrategy": {
+              "default": "RollingUpdate",
+              "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+              "title": "updateStrategy"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-nappl",
+          "type": "object"
+        },
+        "nappljobs": {
+          "description": "nscale Server Application Layer, the central component in the nscale ecosystem",
+          "properties": {
+            "database": {
+              "additionalProperties": false,
+              "description": "If you define the database in your values, this DB settings are taken. If you leave this empty, the settings from the config file are used.",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "alternative 1: the account name of the technical DB user for nscale",
+                  "title": "account"
+                },
+                "dialect": {
+                  "default": "",
+                  "description": "the database dialect to use",
+                  "title": "dialect"
+                },
+                "driverclass": {
+                  "default": "",
+                  "description": "the driver class to use",
+                  "title": "driverclass"
+                },
+                "name": {
+                  "default": "",
+                  "description": "the name of the database to use",
+                  "title": "name"
+                },
+                "password": {
+                  "default": "",
+                  "description": "alternative 1: the password of the technical DB user for nscale",
+                  "title": "password"
+                },
+                "passwordEncoded": {
+                  "default": "",
+                  "description": "weather the DB password is stored encrypted",
+                  "title": "passwordEncoded"
+                },
+                "schema": {
+                  "default": "",
+                  "description": "the database schema to use",
+                  "title": "schema"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "alternative 2: use a secret for the account and password",
+                  "title": "secret"
+                },
+                "url": {
+                  "default": "",
+                  "description": "the DB URL",
+                  "title": "url"
+                }
+              },
+              "title": "database"
+            },
+            "disableSessionReplication": {
+              "default": "",
+              "description": "enables/disables the session replication for these cluster members.",
+              "title": "disableSessionReplication"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "application-layer",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1300.2024121814",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/nscalealinst1",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "includeDefaultPaths": {
+                  "default": "true",
+                  "description": "toggles default paths like index.html, res and engine.properties",
+                  "title": "includeDefaultPaths"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "jobs": {
+              "default": "true",
+              "description": "enables/disables the job affinity / priority for these cluster members",
+              "title": "jobs"
+            },
+            "kubePing": {
+              "additionalProperties": false,
+              "description": "sets the serviceAccount for NAPPL. Up to 9.1.1100, this was needed for  the cluster communication (kubePing). Starting 9.1.1201, this is not the case any more If it is left empty, also the automountServiceAccountToken is disabled. If you set Values, they are ignored in Versions > 9.1.1200",
+              "properties": {
+                "create": {
+                  "default": "true",
+                  "description": "Creates the ServiceAccount (only if Version < 9.1.1200) Later Versions use a Cluster Service and resolve the IP Adresses from the EndpointSlices",
+                  "title": "create"
+                },
+                "name": {
+                  "default": "{{ .component.fullName }}-kubeping",
+                  "description": "Set the ServiceAccount Name for the kubePing Protocol",
+                  "title": "name"
+                }
+              },
+              "title": "kubePing"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8080",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8443",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "application-layer",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "core",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCount": {
+              "default": "",
+              "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+              "title": "minReplicaCount"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/application-layer/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "/usr/share/fonts/truetype/nplus",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/application-layer/conf/license.xml",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/application-layer/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "5Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "additionalProperties": false,
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "priority": {
+              "additionalProperties": false,
+              "description": "You can give a component a specific priorityClass to implement a quality of service. You can leave this empty, then no priority is set. If you set a class, this class is taken If you additionally enable create, the class is created for you with the value defined.",
+              "properties": {
+                "className": {
+                  "default": "",
+                  "description": "Set the priority class for the Application Layer deployment if desired",
+                  "title": "className"
+                },
+                "createClass": {
+                  "default": "true",
+                  "description": "Creates an individual PriorityClass for this instance",
+                  "title": "createClass"
+                },
+                "value": {
+                  "default": "1000000",
+                  "description": "Sets the priorityValue",
+                  "title": "value"
+                }
+              },
+              "title": "priority"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "cni": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "dbIpRange": {
+                      "default": "",
+                      "description": "defines the IP Range of out-of-cluster DB Servers, that the nappl is allowed to communicate with.",
+                      "title": "dbIpRange"
+                    },
+                    "sapIpRange": {
+                      "default": "",
+                      "description": "defines the IP Range of out-of-cluster SAP Servers, that the nappl is allowed to communicate with.",
+                      "title": "sapIpRange"
+                    }
+                  },
+                  "title": "cni",
+                  "type": "object"
+                },
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "sessionCacheStorageType": {
+              "default": "",
+              "description": "Sets the Session Cache Storage Type to HEAP or OFF_HEAP",
+              "title": "sessionCacheStorageType"
+            },
+            "snc": {
+              "additionalProperties": false,
+              "properties": {
+                "enabled": {
+                  "default": "false",
+                  "description": "Enables the NAPPL SNC to access SAP Systems. Since nscale 8, the configuration is done in the Administration Client.",
+                  "title": "enabled"
+                }
+              },
+              "title": "snc",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "description": "Set tolerations for this component",
+              "items": {},
+              "title": "tolerations"
+            },
+            "updateStrategy": {
+              "default": "RollingUpdate",
+              "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+              "title": "updateStrategy"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-nappl",
+          "type": "object"
+        },
+        "nstl": {
+          "description": "nscale Server Storage Layer, virtualizing the storage to be used by the nscale Server",
+          "properties": {
+            "accounting": {
+              "default": "",
+              "description": "sets and enables / disables the accounting function. If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`) The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths`",
+              "title": "accounting"
+            },
+            "checkHighestDocId": {
+              "default": "",
+              "description": "enables checking the highest DocID when starting the server. this only makes sense, if you also set a separate volume for the highest ID This is a backup / restore feature to avoid data mangling",
+              "title": "checkHighestDocId"
+            },
+            "dvCheckPath": {
+              "default": "",
+              "description": "sets the path of the highest ID file.",
+              "title": "dvCheckPath"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "storage-layer",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1201.2024112518",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "ingress settings. however, the nstl does not use http, so a layer 7 LB does not make any sense. @ignore",
+              "properties": {
+                "enabled": {
+                  "default": "false",
+                  "description": "enables ingress on this component do not change this! @ignore",
+                  "title": "enabled"
+                }
+              },
+              "title": "ingress"
+            },
+            "logForwarder": {
+              "default": "",
+              "title": "logForwarder",
+              "type": "null"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "cpp",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "3005",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "3006",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "storage-layer",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "nstl",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/storage-layer/etc",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "50Gi",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "50Gi",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/storage-layer/etc/license.xml",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "medium": {
+                      "default": "",
+                      "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                      "title": "medium"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "5Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "500Mi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "cni": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "nstlIpRange": {
+                      "default": "",
+                      "description": "You might want to access storage layer outside the cluster (proxy concept) To do so, you can add a specific IP Range here, which is set within the  network policy.",
+                      "title": "nstlIpRange"
+                    }
+                  },
+                  "title": "cni",
+                  "type": "object"
+                },
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsNonRoot": {
+                      "default": true,
+                      "title": "runAsNonRoot",
+                      "type": "boolean"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            }
+          },
+          "title": "nplus-component-nstl",
+          "type": "object"
+        },
+        "nstla": {
+          "description": "nscale Server Storage Layer, virtualizing the storage to be used by the nscale Server",
+          "properties": {
+            "accounting": {
+              "default": "",
+              "description": "sets and enables / disables the accounting function. If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`) The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths`",
+              "title": "accounting"
+            },
+            "checkHighestDocId": {
+              "default": "",
+              "description": "enables checking the highest DocID when starting the server. this only makes sense, if you also set a separate volume for the highest ID This is a backup / restore feature to avoid data mangling",
+              "title": "checkHighestDocId"
+            },
+            "dvCheckPath": {
+              "default": "",
+              "description": "sets the path of the highest ID file.",
+              "title": "dvCheckPath"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "storage-layer",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1201.2024112518",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "ingress settings. however, the nstl does not use http, so a layer 7 LB does not make any sense. @ignore",
+              "properties": {
+                "enabled": {
+                  "default": "false",
+                  "description": "enables ingress on this component do not change this! @ignore",
+                  "title": "enabled"
+                }
+              },
+              "title": "ingress"
+            },
+            "logForwarder": {
+              "default": "",
+              "title": "logForwarder",
+              "type": "null"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "cpp",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "3005",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "3006",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "storage-layer",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "nstl",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/storage-layer/etc",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "50Gi",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "50Gi",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/storage-layer/etc/license.xml",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "medium": {
+                      "default": "",
+                      "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                      "title": "medium"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "5Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "500Mi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "cni": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "nstlIpRange": {
+                      "default": "",
+                      "description": "You might want to access storage layer outside the cluster (proxy concept) To do so, you can add a specific IP Range here, which is set within the  network policy.",
+                      "title": "nstlIpRange"
+                    }
+                  },
+                  "title": "cni",
+                  "type": "object"
+                },
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsNonRoot": {
+                      "default": true,
+                      "title": "runAsNonRoot",
+                      "type": "boolean"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            }
+          },
+          "title": "nplus-component-nstl",
+          "type": "object"
+        },
+        "nstlb": {
+          "description": "nscale Server Storage Layer, virtualizing the storage to be used by the nscale Server",
+          "properties": {
+            "accounting": {
+              "default": "",
+              "description": "sets and enables / disables the accounting function. If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`) The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths`",
+              "title": "accounting"
+            },
+            "checkHighestDocId": {
+              "default": "",
+              "description": "enables checking the highest DocID when starting the server. this only makes sense, if you also set a separate volume for the highest ID This is a backup / restore feature to avoid data mangling",
+              "title": "checkHighestDocId"
+            },
+            "dvCheckPath": {
+              "default": "",
+              "description": "sets the path of the highest ID file.",
+              "title": "dvCheckPath"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "storage-layer",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1201.2024112518",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "ingress settings. however, the nstl does not use http, so a layer 7 LB does not make any sense. @ignore",
+              "properties": {
+                "enabled": {
+                  "default": "false",
+                  "description": "enables ingress on this component do not change this! @ignore",
+                  "title": "enabled"
+                }
+              },
+              "title": "ingress"
+            },
+            "logForwarder": {
+              "default": "",
+              "title": "logForwarder",
+              "type": "null"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "cpp",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "3005",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "3006",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "storage-layer",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "nstl",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/storage-layer/etc",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "50Gi",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "50Gi",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/storage-layer/etc/license.xml",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "medium": {
+                      "default": "",
+                      "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                      "title": "medium"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "5Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "500Mi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "cni": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "nstlIpRange": {
+                      "default": "",
+                      "description": "You might want to access storage layer outside the cluster (proxy concept) To do so, you can add a specific IP Range here, which is set within the  network policy.",
+                      "title": "nstlIpRange"
+                    }
+                  },
+                  "title": "cni",
+                  "type": "object"
+                },
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsNonRoot": {
+                      "default": true,
+                      "title": "runAsNonRoot",
+                      "type": "boolean"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            }
+          },
+          "title": "nplus-component-nstl",
+          "type": "object"
+        },
+        "nstlc": {
+          "description": "nscale Server Storage Layer, virtualizing the storage to be used by the nscale Server",
+          "properties": {
+            "accounting": {
+              "default": "",
+              "description": "sets and enables / disables the accounting function. If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`) The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths`",
+              "title": "accounting"
+            },
+            "checkHighestDocId": {
+              "default": "",
+              "description": "enables checking the highest DocID when starting the server. this only makes sense, if you also set a separate volume for the highest ID This is a backup / restore feature to avoid data mangling",
+              "title": "checkHighestDocId"
+            },
+            "dvCheckPath": {
+              "default": "",
+              "description": "sets the path of the highest ID file.",
+              "title": "dvCheckPath"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "storage-layer",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1201.2024112518",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "ingress settings. however, the nstl does not use http, so a layer 7 LB does not make any sense. @ignore",
+              "properties": {
+                "enabled": {
+                  "default": "false",
+                  "description": "enables ingress on this component do not change this! @ignore",
+                  "title": "enabled"
+                }
+              },
+              "title": "ingress"
+            },
+            "logForwarder": {
+              "default": "",
+              "title": "logForwarder",
+              "type": "null"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "cpp",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "3005",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "3006",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "storage-layer",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "nstl",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/storage-layer/etc",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "50Gi",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "50Gi",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/storage-layer/etc/license.xml",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "medium": {
+                      "default": "",
+                      "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                      "title": "medium"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "5Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "500Mi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "cni": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "nstlIpRange": {
+                      "default": "",
+                      "description": "You might want to access storage layer outside the cluster (proxy concept) To do so, you can add a specific IP Range here, which is set within the  network policy.",
+                      "title": "nstlIpRange"
+                    }
+                  },
+                  "title": "cni",
+                  "type": "object"
+                },
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsNonRoot": {
+                      "default": true,
+                      "title": "runAsNonRoot",
+                      "type": "boolean"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            }
+          },
+          "title": "nplus-component-nstl",
+          "type": "object"
+        },
+        "nstld": {
+          "description": "nscale Server Storage Layer, virtualizing the storage to be used by the nscale Server",
+          "properties": {
+            "accounting": {
+              "default": "",
+              "description": "sets and enables / disables the accounting function. If enabled, it writes the csv files to *ptemp* (`<instance>/<component>/accounting`) The internal path is set to `/opt/ceyoniq/nscale-server/storage-layer/accounting` by `mounts.ptemp.paths`",
+              "title": "accounting"
+            },
+            "checkHighestDocId": {
+              "default": "",
+              "description": "enables checking the highest DocID when starting the server. this only makes sense, if you also set a separate volume for the highest ID This is a backup / restore feature to avoid data mangling",
+              "title": "checkHighestDocId"
+            },
+            "dvCheckPath": {
+              "default": "",
+              "description": "sets the path of the highest ID file.",
+              "title": "dvCheckPath"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "storage-layer",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1201.2024112518",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "ingress settings. however, the nstl does not use http, so a layer 7 LB does not make any sense. @ignore",
+              "properties": {
+                "enabled": {
+                  "default": "false",
+                  "description": "enables ingress on this component do not change this! @ignore",
+                  "title": "enabled"
+                }
+              },
+              "title": "ingress"
+            },
+            "logForwarder": {
+              "default": "",
+              "title": "logForwarder",
+              "type": "null"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "cpp",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "3005",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "3006",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "storage-layer",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "nstl",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/storage-layer/etc",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "50Gi",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "50Gi",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/storage-layer/etc/license.xml",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "medium": {
+                      "default": "",
+                      "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                      "title": "medium"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "5Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "500Mi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "cni": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "nstlIpRange": {
+                      "default": "",
+                      "description": "You might want to access storage layer outside the cluster (proxy concept) To do so, you can add a specific IP Range here, which is set within the  network policy.",
+                      "title": "nstlIpRange"
+                    }
+                  },
+                  "title": "cni",
+                  "type": "object"
+                },
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsNonRoot": {
+                      "default": true,
+                      "title": "runAsNonRoot",
+                      "type": "boolean"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            }
+          },
+          "title": "nplus-component-nstl",
+          "type": "object"
+        },
+        "operator": {
+          "description": "Installs the nplus operator managin the custom resource definitions for nplus and nscale",
+          "properties": {
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "operator",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "cr.nplus.cloud/subscription",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "1.2.1300",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/monitoring",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8080",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8443",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "envoperator",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "1",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "512Mi",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "1m",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "64Mi",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "ui": {
+              "default": "true",
+              "description": "Enables the web ui, default under /monitoring",
+              "title": "ui"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            }
+          },
+          "title": "nplus-environment-operator",
+          "type": "object"
+        },
+        "pam": {
+          "description": "nscale Process Automation Modeler, providing Web UI Modeler for PAP",
+          "properties": {
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "process-automation-modeler",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1200.63696",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/modeler",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8092",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "pam",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "pam",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/process-automation-modeler/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/process-automation-modeler/apache/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "As this is a Admin component, there is no HA or anything so we stick to exactly 1 replica. @ignore -- Fix Value",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-pam",
+          "type": "object"
+        },
+        "pipeliner": {
+          "description": "nscale Pipeliner, the mass import / export tool of nscale",
+          "properties": {
+            "dav": {
+              "additionalProperties": false,
+              "properties": {
+                "account": {
+                  "default": "pipeliner",
+                  "description": "the dav user",
+                  "title": "account"
+                },
+                "image": {
+                  "additionalProperties": false,
+                  "description": "the Image to use for the DAV server",
+                  "properties": {
+                    "name": {
+                      "default": "toolbox2",
+                      "title": "name",
+                      "type": "string"
+                    },
+                    "pullPolicy": {
+                      "default": "IfNotPresent",
+                      "description": "the DAV server image pull policy",
+                      "title": "pullPolicy"
+                    },
+                    "repo": {
+                      "default": "cr.nplus.cloud/subscription",
+                      "title": "repo",
+                      "type": "string"
+                    },
+                    "tag": {
+                      "default": "1.2.1300",
+                      "title": "tag",
+                      "type": "string"
+                    }
+                  },
+                  "title": "image"
+                },
+                "password": {
+                  "default": "pipeliner",
+                  "description": "password of the dav user",
+                  "title": "password"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Alternatively, define a secret",
+                  "title": "secret"
+                }
+              },
+              "title": "dav",
+              "type": "object"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "pipeliner",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1300.2024121815",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/{{ .component.name }}",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "cpp",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8080",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "4173",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "pipeliner",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "pipeliner",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-pipeliner/workdir",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "10Gi",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "defaultConfig": {
+                  "default": "{{ .component.fullName }}-defaultconfig",
+                  "description": "Sets a configMap with default configuration files that get copied to a new and empty container just before the template folder gets copied. Existing files are not overwritten.",
+                  "title": "defaultConfig"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-pipeliner/workdir/license.xml",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-pipeliner/workdir/log",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "0",
+              "description": "Default ReplicaCount is 0 as the pipeliner requires a working cold.xml",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-pipeliner",
+          "type": "object"
+        },
+        "prepper": {
+          "description": "nplus Prepper, used to deploy assets prior to component deployment",
+          "properties": {
+            "download": {
+              "default": "",
+              "description": "A list of URLs (Links) to Assets to download before anything else if the download is a .tar.gz, it is automatically untared to /pool/downloads",
+              "title": "download"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "toolbox2",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "cr.nplus.cloud/subscription",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "1.2.1300",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "yaml-language-server: $schema=values.schema.json",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "application",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/application",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "/pool",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "/tmp",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "nstl": {
+              "additionalProperties": false,
+              "properties": {
+                "host": {
+                  "default": "",
+                  "description": "The dns of the *nscale Server Storage Layer*. This is used to add it to the nappl configuration",
+                  "title": "host"
+                }
+              },
+              "title": "nstl",
+              "type": "object"
+            },
+            "prerun": {
+              "default": "",
+              "description": "A list of scripts to run before the deployment of Apps",
+              "title": "prerun"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "rs": {
+              "additionalProperties": false,
+              "properties": {
+                "host": {
+                  "default": "",
+                  "description": "The dns of the *nscale rendition Server*. This is used to add it to the nappl configuration",
+                  "title": "host"
+                }
+              },
+              "title": "rs",
+              "type": "object"
+            },
+            "run": {
+              "default": "",
+              "description": "A list of scripts to run after the deployment of Apps",
+              "title": "run"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-prepper",
+          "type": "object"
+        },
+        "rms": {
+          "description": "nplus Remote Management Server incl. RMS and Access Proxy",
+          "properties": {
+            "comps": {
+              "additionalProperties": false,
+              "description": "yaml-language-server: $schema=values.schema.json",
+              "properties": {
+                "cmis": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "CMIS Connector",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}cmis.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "cmis",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8096",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8196",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "Deployment",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "cmis",
+                  "type": "object"
+                },
+                "ilm": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "SAP ILM Connector",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}ilm.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "ilm",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8297",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8397",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "Deployment",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "ilm",
+                  "type": "object"
+                },
+                "mon": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Monitoring Console",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}mon.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "mon",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8387",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8388",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        },
+                        "tcp": {
+                          "default": "8389",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "tcp"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "StatefulSet",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "mon",
+                  "type": "object"
+                },
+                "nappl": {
+                  "additionalProperties": false,
+                  "description": "Values for the nappl component",
+                  "properties": {
+                    "displayName": {
+                      "default": "Application Layer",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "nappl",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8080",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8443",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "StatefulSet",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "nappl"
+                },
+                "nstl": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Storage Layer",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}nstl.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "nstl",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "tcp": {
+                          "default": "3005",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "tcp"
+                        },
+                        "tcps": {
+                          "default": "3006",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "tcps"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "StatefulSet",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "nstl",
+                  "type": "object"
+                },
+                "pipeliner": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Pipeliner",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}pipeliner.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "pipeliner",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "tcp": {
+                          "default": "4173",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "tcp"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "StatefulSet",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "pipeliner",
+                  "type": "object"
+                },
+                "rs": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Rendition Server",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}rs.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "rs",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8192",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8193",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "Deployment",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "rs",
+                  "type": "object"
+                },
+                "web": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Application Layer Web",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}web.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "web",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8090",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8453",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "Deployment",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "web",
+                  "type": "object"
+                }
+              },
+              "title": "comps",
+              "type": "object"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "admin-server",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "git.nplus.cloud/subscription",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "1.2.1200",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "rms",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "medium": {
+                      "default": "",
+                      "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                      "title": "medium"
+                    },
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-rms/log",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "100Mi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+              "title": "replicaCount"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "cni": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "adminIpRange": {
+                      "default": "",
+                      "description": "defines the IP Range of out-of-cluster Administrator Workplaces that are allowed to access the RMS Server.",
+                      "title": "adminIpRange"
+                    }
+                  },
+                  "title": "cni",
+                  "type": "object"
+                },
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            }
+          },
+          "title": "nplus-component-rms",
+          "type": "object"
+        },
+        "rmsa": {
+          "description": "nplus Remote Management Server incl. RMS and Access Proxy",
+          "properties": {
+            "comps": {
+              "additionalProperties": false,
+              "description": "yaml-language-server: $schema=values.schema.json",
+              "properties": {
+                "cmis": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "CMIS Connector",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}cmis.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "cmis",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8096",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8196",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "Deployment",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "cmis",
+                  "type": "object"
+                },
+                "ilm": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "SAP ILM Connector",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}ilm.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "ilm",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8297",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8397",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "Deployment",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "ilm",
+                  "type": "object"
+                },
+                "mon": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Monitoring Console",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}mon.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "mon",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8387",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8388",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        },
+                        "tcp": {
+                          "default": "8389",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "tcp"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "StatefulSet",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "mon",
+                  "type": "object"
+                },
+                "nappl": {
+                  "additionalProperties": false,
+                  "description": "Values for the nappl component",
+                  "properties": {
+                    "displayName": {
+                      "default": "Application Layer",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "nappl",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8080",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8443",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "StatefulSet",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "nappl"
+                },
+                "nstl": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Storage Layer",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}nstl.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "nstl",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "tcp": {
+                          "default": "3005",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "tcp"
+                        },
+                        "tcps": {
+                          "default": "3006",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "tcps"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "StatefulSet",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "nstl",
+                  "type": "object"
+                },
+                "pipeliner": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Pipeliner",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}pipeliner.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "pipeliner",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "tcp": {
+                          "default": "4173",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "tcp"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "StatefulSet",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "pipeliner",
+                  "type": "object"
+                },
+                "rs": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Rendition Server",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}rs.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "rs",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8192",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8193",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "Deployment",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "rs",
+                  "type": "object"
+                },
+                "web": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Application Layer Web",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}web.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "web",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8090",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8453",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "Deployment",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "web",
+                  "type": "object"
+                }
+              },
+              "title": "comps",
+              "type": "object"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "admin-server",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "git.nplus.cloud/subscription",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "1.2.1200",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "rms",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "medium": {
+                      "default": "",
+                      "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                      "title": "medium"
+                    },
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-rms/log",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "100Mi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+              "title": "replicaCount"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "cni": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "adminIpRange": {
+                      "default": "",
+                      "description": "defines the IP Range of out-of-cluster Administrator Workplaces that are allowed to access the RMS Server.",
+                      "title": "adminIpRange"
+                    }
+                  },
+                  "title": "cni",
+                  "type": "object"
+                },
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            }
+          },
+          "title": "nplus-component-rms",
+          "type": "object"
+        },
+        "rmsb": {
+          "description": "nplus Remote Management Server incl. RMS and Access Proxy",
+          "properties": {
+            "comps": {
+              "additionalProperties": false,
+              "description": "yaml-language-server: $schema=values.schema.json",
+              "properties": {
+                "cmis": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "CMIS Connector",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}cmis.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "cmis",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8096",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8196",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "Deployment",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "cmis",
+                  "type": "object"
+                },
+                "ilm": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "SAP ILM Connector",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}ilm.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "ilm",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8297",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8397",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "Deployment",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "ilm",
+                  "type": "object"
+                },
+                "mon": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Monitoring Console",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}mon.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "mon",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8387",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8388",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        },
+                        "tcp": {
+                          "default": "8389",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "tcp"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "StatefulSet",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "mon",
+                  "type": "object"
+                },
+                "nappl": {
+                  "additionalProperties": false,
+                  "description": "Values for the nappl component",
+                  "properties": {
+                    "displayName": {
+                      "default": "Application Layer",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "nappl",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8080",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8443",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "StatefulSet",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "nappl"
+                },
+                "nstl": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Storage Layer",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}nstl.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "nstl",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "tcp": {
+                          "default": "3005",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "tcp"
+                        },
+                        "tcps": {
+                          "default": "3006",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "tcps"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "StatefulSet",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "nstl",
+                  "type": "object"
+                },
+                "pipeliner": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Pipeliner",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}pipeliner.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "pipeliner",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "tcp": {
+                          "default": "4173",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "tcp"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "StatefulSet",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "pipeliner",
+                  "type": "object"
+                },
+                "rs": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Rendition Server",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}rs.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "rs",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8192",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8193",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "Deployment",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "rs",
+                  "type": "object"
+                },
+                "web": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "displayName": {
+                      "default": "Application Layer Web",
+                      "description": "The displayName name of the component as it appears in the RMS Server Properties @internal -- do not change",
+                      "title": "displayName"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "Toggles if this component should be available through RMS",
+                      "title": "enabled"
+                    },
+                    "host": {
+                      "default": "{{ .component.prefix }}web.{{ .Release.Namespace }}.svc.cluster.local",
+                      "description": "The host, where this component runs",
+                      "title": "host"
+                    },
+                    "name": {
+                      "default": "web",
+                      "description": "The internal name of the component @internal -- do not change",
+                      "title": "name"
+                    },
+                    "ports": {
+                      "additionalProperties": false,
+                      "description": "The ports exposed by the L4 Load Balancer / Reverse Proxy @internal -- do not change",
+                      "properties": {
+                        "http": {
+                          "default": "8090",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "http"
+                        },
+                        "https": {
+                          "default": "8453",
+                          "description": "proxied port @internal -- do not change",
+                          "title": "https"
+                        }
+                      },
+                      "title": "ports"
+                    },
+                    "replicaSetType": {
+                      "default": "Deployment",
+                      "description": "The type of the replicaSet - important for the kubectl command @internal -- do not change",
+                      "title": "replicaSetType"
+                    },
+                    "restartReplicas": {
+                      "default": "1",
+                      "description": "The amount of replicas to set when starting through the *nscale Administrator* client",
+                      "title": "restartReplicas"
+                    }
+                  },
+                  "title": "web",
+                  "type": "object"
+                }
+              },
+              "title": "comps",
+              "type": "object"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "admin-server",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "git.nplus.cloud/subscription",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "1.2.1200",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "rms",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "medium": {
+                      "default": "",
+                      "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                      "title": "medium"
+                    },
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-rms/log",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "100Mi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "the replicaCount for the Storage Layer. This does not make sense, so leave this at 1 at any time, unless you know exactly what you are doing. @ignore",
+              "title": "replicaCount"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "cni": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "adminIpRange": {
+                      "default": "",
+                      "description": "defines the IP Range of out-of-cluster Administrator Workplaces that are allowed to access the RMS Server.",
+                      "title": "adminIpRange"
+                    }
+                  },
+                  "title": "cni",
+                  "type": "object"
+                },
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            }
+          },
+          "title": "nplus-component-rms",
+          "type": "object"
+        },
+        "rs": {
+          "description": "nscale Rendition Server, providing means to format-convert common file types",
+          "properties": {
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "rendition-server",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1301.2024121910",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "false",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8192",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8193",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "rendition-server",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "rs",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCount": {
+              "default": "",
+              "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+              "title": "minReplicaCount"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-rendition-server/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "10Gi",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "/usr/share/fonts/truetype/nplus",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-rendition-server/conf/license.xml",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-rendition-server/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "5Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "10Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "updateStrategy": {
+              "default": "",
+              "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+              "title": "updateStrategy"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-rs",
+          "type": "object"
+        },
+        "sharepoint": {
+          "description": "nscale SharePoint Connector, providing SP archiving to the Instance",
+          "properties": {
+            "clusterService": {
+              "additionalProperties": false,
+              "properties": {
+                "contextPath": {
+                  "default": "",
+                  "description": "set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances)",
+                  "title": "contextPath"
+                },
+                "enabled": {
+                  "default": false,
+                  "title": "enabled",
+                  "type": "boolean"
+                }
+              },
+              "title": "clusterService",
+              "type": "object"
+            },
+            "connector": {
+              "additionalProperties": false,
+              "properties": {
+                "cTagPropertyName": {
+                  "default": "cTag",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "cTagPropertyName"
+                },
+                "eTagPropertyName": {
+                  "default": "eTag",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "eTagPropertyName"
+                },
+                "idPropertyName": {
+                  "default": "sharePointId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "idPropertyName"
+                },
+                "listItemIdPropertyName": {
+                  "default": "SharePointListItemId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "listItemIdPropertyName"
+                },
+                "nscaleExpirationPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleExpirationPropertyName"
+                },
+                "nscaleGdprRelevantPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleGdprRelevantPropertyName"
+                },
+                "nscaleLegalHidePropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleLegalHidePropertyName"
+                },
+                "nscaleLegalHoldPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleLegalHoldPropertyName"
+                },
+                "nscaleRetentionPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleRetentionPropertyName"
+                },
+                "parentIdPropertyName": {
+                  "default": "sharePointParentId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "parentIdPropertyName"
+                },
+                "sharePointChangeTokenPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointChangeTokenPropertyName"
+                },
+                "sharePointCreatedPropertyName": {
+                  "default": "SharePointCreated",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointCreatedPropertyName"
+                },
+                "sharePointCreatorPropertyName": {
+                  "default": "SharePointCreator",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointCreatorPropertyName"
+                },
+                "sharePointEditedPropertyName": {
+                  "default": "SharePointLastModified",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointEditedPropertyName"
+                },
+                "sharePointEditorPropertyName": {
+                  "default": "SharePointEditor",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointEditorPropertyName"
+                },
+                "stubIdPropertyName": {
+                  "default": "SharePointStubId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "stubIdPropertyName"
+                },
+                "stubListItemIdPropertyName": {
+                  "default": "SharePointStubListItemId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "stubListItemIdPropertyName"
+                },
+                "webUrlPropertyName": {
+                  "default": "sharePointWebUrl",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "webUrlPropertyName"
+                }
+              },
+              "title": "connector",
+              "type": "object"
+            },
+            "doInitialCrawl": {
+              "default": "false",
+              "description": "toggle initial crawling. This value is mandatory.",
+              "title": "doInitialCrawl"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "sharepoint-connector",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.2.1400.2024073012",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/nscale_spc",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "management": {
+              "additionalProperties": false,
+              "properties": {
+                "port": {
+                  "default": "18098",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "port"
+                },
+                "security": {
+                  "default": "false",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "security"
+                },
+                "ssl": {
+                  "default": "false",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "ssl"
+                }
+              },
+              "title": "management",
+              "type": "object"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8098",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8498",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "sharepoint-connector",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "sharepoint",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/sharepoint-connector/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/sharepoint-connector/bin/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "baseFolder": {
+                  "default": "",
+                  "description": "The base folder, this component should write to",
+                  "title": "baseFolder"
+                },
+                "docArea": {
+                  "default": "",
+                  "description": "The document area, this component should write to",
+                  "title": "docArea"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "parallelRequests": {
+              "default": "5",
+              "description": "amount of parallel requests",
+              "title": "parallelRequests"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "this is fix to 1 @ignore",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "sharepoint": {
+              "additionalProperties": false,
+              "properties": {
+                "clientCertPw": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "clientCertPw"
+                },
+                "clientId": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "clientId"
+                },
+                "doCheckOut": {
+                  "default": "false",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "doCheckOut"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "secret"
+                },
+                "serviceBusConnectionString": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusConnectionString"
+                },
+                "serviceBusQueueName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusQueueName"
+                },
+                "serviceBusRetentionConnectionString": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusRetentionConnectionString"
+                },
+                "serviceBusRetentionQueueName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusRetentionQueueName"
+                },
+                "serviceBusTopicNameConfigUpdate": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusTopicNameConfigUpdate"
+                },
+                "spHost": {
+                  "default": "https://example.com",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "spHost"
+                },
+                "tenantId": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "tenantId"
+                },
+                "triggerProperty": {
+                  "default": "toBeArchived",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "triggerProperty"
+                },
+                "webUserPw": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "webUserPw"
+                }
+              },
+              "title": "sharepoint",
+              "type": "object"
+            },
+            "ssl": {
+              "additionalProperties": false,
+              "properties": {
+                "keyAlias": {
+                  "default": "https",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keyAlias"
+                },
+                "keyPassword": {
+                  "default": "secret",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keyPassword"
+                },
+                "keystore": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystore"
+                },
+                "keystorePassword": {
+                  "default": "secret",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystorePassword"
+                },
+                "keystoreSecret": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystoreSecret"
+                }
+              },
+              "title": "ssl",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-sharepoint",
+          "type": "object"
+        },
+        "sharepointa": {
+          "description": "nscale SharePoint Connector, providing SP archiving to the Instance",
+          "properties": {
+            "clusterService": {
+              "additionalProperties": false,
+              "properties": {
+                "contextPath": {
+                  "default": "",
+                  "description": "set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances)",
+                  "title": "contextPath"
+                },
+                "enabled": {
+                  "default": false,
+                  "title": "enabled",
+                  "type": "boolean"
+                }
+              },
+              "title": "clusterService",
+              "type": "object"
+            },
+            "connector": {
+              "additionalProperties": false,
+              "properties": {
+                "cTagPropertyName": {
+                  "default": "cTag",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "cTagPropertyName"
+                },
+                "eTagPropertyName": {
+                  "default": "eTag",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "eTagPropertyName"
+                },
+                "idPropertyName": {
+                  "default": "sharePointId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "idPropertyName"
+                },
+                "listItemIdPropertyName": {
+                  "default": "SharePointListItemId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "listItemIdPropertyName"
+                },
+                "nscaleExpirationPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleExpirationPropertyName"
+                },
+                "nscaleGdprRelevantPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleGdprRelevantPropertyName"
+                },
+                "nscaleLegalHidePropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleLegalHidePropertyName"
+                },
+                "nscaleLegalHoldPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleLegalHoldPropertyName"
+                },
+                "nscaleRetentionPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleRetentionPropertyName"
+                },
+                "parentIdPropertyName": {
+                  "default": "sharePointParentId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "parentIdPropertyName"
+                },
+                "sharePointChangeTokenPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointChangeTokenPropertyName"
+                },
+                "sharePointCreatedPropertyName": {
+                  "default": "SharePointCreated",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointCreatedPropertyName"
+                },
+                "sharePointCreatorPropertyName": {
+                  "default": "SharePointCreator",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointCreatorPropertyName"
+                },
+                "sharePointEditedPropertyName": {
+                  "default": "SharePointLastModified",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointEditedPropertyName"
+                },
+                "sharePointEditorPropertyName": {
+                  "default": "SharePointEditor",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointEditorPropertyName"
+                },
+                "stubIdPropertyName": {
+                  "default": "SharePointStubId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "stubIdPropertyName"
+                },
+                "stubListItemIdPropertyName": {
+                  "default": "SharePointStubListItemId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "stubListItemIdPropertyName"
+                },
+                "webUrlPropertyName": {
+                  "default": "sharePointWebUrl",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "webUrlPropertyName"
+                }
+              },
+              "title": "connector",
+              "type": "object"
+            },
+            "doInitialCrawl": {
+              "default": "false",
+              "description": "toggle initial crawling. This value is mandatory.",
+              "title": "doInitialCrawl"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "sharepoint-connector",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.2.1400.2024073012",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/nscale_spc",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "management": {
+              "additionalProperties": false,
+              "properties": {
+                "port": {
+                  "default": "18098",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "port"
+                },
+                "security": {
+                  "default": "false",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "security"
+                },
+                "ssl": {
+                  "default": "false",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "ssl"
+                }
+              },
+              "title": "management",
+              "type": "object"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8098",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8498",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "sharepoint-connector",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "sharepoint",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/sharepoint-connector/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/sharepoint-connector/bin/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "baseFolder": {
+                  "default": "",
+                  "description": "The base folder, this component should write to",
+                  "title": "baseFolder"
+                },
+                "docArea": {
+                  "default": "",
+                  "description": "The document area, this component should write to",
+                  "title": "docArea"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "parallelRequests": {
+              "default": "5",
+              "description": "amount of parallel requests",
+              "title": "parallelRequests"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "this is fix to 1 @ignore",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "sharepoint": {
+              "additionalProperties": false,
+              "properties": {
+                "clientCertPw": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "clientCertPw"
+                },
+                "clientId": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "clientId"
+                },
+                "doCheckOut": {
+                  "default": "false",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "doCheckOut"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "secret"
+                },
+                "serviceBusConnectionString": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusConnectionString"
+                },
+                "serviceBusQueueName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusQueueName"
+                },
+                "serviceBusRetentionConnectionString": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusRetentionConnectionString"
+                },
+                "serviceBusRetentionQueueName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusRetentionQueueName"
+                },
+                "serviceBusTopicNameConfigUpdate": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusTopicNameConfigUpdate"
+                },
+                "spHost": {
+                  "default": "https://example.com",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "spHost"
+                },
+                "tenantId": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "tenantId"
+                },
+                "triggerProperty": {
+                  "default": "toBeArchived",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "triggerProperty"
+                },
+                "webUserPw": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "webUserPw"
+                }
+              },
+              "title": "sharepoint",
+              "type": "object"
+            },
+            "ssl": {
+              "additionalProperties": false,
+              "properties": {
+                "keyAlias": {
+                  "default": "https",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keyAlias"
+                },
+                "keyPassword": {
+                  "default": "secret",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keyPassword"
+                },
+                "keystore": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystore"
+                },
+                "keystorePassword": {
+                  "default": "secret",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystorePassword"
+                },
+                "keystoreSecret": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystoreSecret"
+                }
+              },
+              "title": "ssl",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-sharepoint",
+          "type": "object"
+        },
+        "sharepointb": {
+          "description": "nscale SharePoint Connector, providing SP archiving to the Instance",
+          "properties": {
+            "clusterService": {
+              "additionalProperties": false,
+              "properties": {
+                "contextPath": {
+                  "default": "",
+                  "description": "set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances)",
+                  "title": "contextPath"
+                },
+                "enabled": {
+                  "default": false,
+                  "title": "enabled",
+                  "type": "boolean"
+                }
+              },
+              "title": "clusterService",
+              "type": "object"
+            },
+            "connector": {
+              "additionalProperties": false,
+              "properties": {
+                "cTagPropertyName": {
+                  "default": "cTag",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "cTagPropertyName"
+                },
+                "eTagPropertyName": {
+                  "default": "eTag",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "eTagPropertyName"
+                },
+                "idPropertyName": {
+                  "default": "sharePointId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "idPropertyName"
+                },
+                "listItemIdPropertyName": {
+                  "default": "SharePointListItemId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "listItemIdPropertyName"
+                },
+                "nscaleExpirationPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleExpirationPropertyName"
+                },
+                "nscaleGdprRelevantPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleGdprRelevantPropertyName"
+                },
+                "nscaleLegalHidePropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleLegalHidePropertyName"
+                },
+                "nscaleLegalHoldPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleLegalHoldPropertyName"
+                },
+                "nscaleRetentionPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleRetentionPropertyName"
+                },
+                "parentIdPropertyName": {
+                  "default": "sharePointParentId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "parentIdPropertyName"
+                },
+                "sharePointChangeTokenPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointChangeTokenPropertyName"
+                },
+                "sharePointCreatedPropertyName": {
+                  "default": "SharePointCreated",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointCreatedPropertyName"
+                },
+                "sharePointCreatorPropertyName": {
+                  "default": "SharePointCreator",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointCreatorPropertyName"
+                },
+                "sharePointEditedPropertyName": {
+                  "default": "SharePointLastModified",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointEditedPropertyName"
+                },
+                "sharePointEditorPropertyName": {
+                  "default": "SharePointEditor",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointEditorPropertyName"
+                },
+                "stubIdPropertyName": {
+                  "default": "SharePointStubId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "stubIdPropertyName"
+                },
+                "stubListItemIdPropertyName": {
+                  "default": "SharePointStubListItemId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "stubListItemIdPropertyName"
+                },
+                "webUrlPropertyName": {
+                  "default": "sharePointWebUrl",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "webUrlPropertyName"
+                }
+              },
+              "title": "connector",
+              "type": "object"
+            },
+            "doInitialCrawl": {
+              "default": "false",
+              "description": "toggle initial crawling. This value is mandatory.",
+              "title": "doInitialCrawl"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "sharepoint-connector",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.2.1400.2024073012",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/nscale_spc",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "management": {
+              "additionalProperties": false,
+              "properties": {
+                "port": {
+                  "default": "18098",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "port"
+                },
+                "security": {
+                  "default": "false",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "security"
+                },
+                "ssl": {
+                  "default": "false",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "ssl"
+                }
+              },
+              "title": "management",
+              "type": "object"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8098",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8498",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "sharepoint-connector",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "sharepoint",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/sharepoint-connector/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/sharepoint-connector/bin/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "baseFolder": {
+                  "default": "",
+                  "description": "The base folder, this component should write to",
+                  "title": "baseFolder"
+                },
+                "docArea": {
+                  "default": "",
+                  "description": "The document area, this component should write to",
+                  "title": "docArea"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "parallelRequests": {
+              "default": "5",
+              "description": "amount of parallel requests",
+              "title": "parallelRequests"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "this is fix to 1 @ignore",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "sharepoint": {
+              "additionalProperties": false,
+              "properties": {
+                "clientCertPw": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "clientCertPw"
+                },
+                "clientId": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "clientId"
+                },
+                "doCheckOut": {
+                  "default": "false",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "doCheckOut"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "secret"
+                },
+                "serviceBusConnectionString": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusConnectionString"
+                },
+                "serviceBusQueueName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusQueueName"
+                },
+                "serviceBusRetentionConnectionString": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusRetentionConnectionString"
+                },
+                "serviceBusRetentionQueueName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusRetentionQueueName"
+                },
+                "serviceBusTopicNameConfigUpdate": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusTopicNameConfigUpdate"
+                },
+                "spHost": {
+                  "default": "https://example.com",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "spHost"
+                },
+                "tenantId": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "tenantId"
+                },
+                "triggerProperty": {
+                  "default": "toBeArchived",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "triggerProperty"
+                },
+                "webUserPw": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "webUserPw"
+                }
+              },
+              "title": "sharepoint",
+              "type": "object"
+            },
+            "ssl": {
+              "additionalProperties": false,
+              "properties": {
+                "keyAlias": {
+                  "default": "https",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keyAlias"
+                },
+                "keyPassword": {
+                  "default": "secret",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keyPassword"
+                },
+                "keystore": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystore"
+                },
+                "keystorePassword": {
+                  "default": "secret",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystorePassword"
+                },
+                "keystoreSecret": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystoreSecret"
+                }
+              },
+              "title": "ssl",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-sharepoint",
+          "type": "object"
+        },
+        "sharepointc": {
+          "description": "nscale SharePoint Connector, providing SP archiving to the Instance",
+          "properties": {
+            "clusterService": {
+              "additionalProperties": false,
+              "properties": {
+                "contextPath": {
+                  "default": "",
+                  "description": "set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances)",
+                  "title": "contextPath"
+                },
+                "enabled": {
+                  "default": false,
+                  "title": "enabled",
+                  "type": "boolean"
+                }
+              },
+              "title": "clusterService",
+              "type": "object"
+            },
+            "connector": {
+              "additionalProperties": false,
+              "properties": {
+                "cTagPropertyName": {
+                  "default": "cTag",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "cTagPropertyName"
+                },
+                "eTagPropertyName": {
+                  "default": "eTag",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "eTagPropertyName"
+                },
+                "idPropertyName": {
+                  "default": "sharePointId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "idPropertyName"
+                },
+                "listItemIdPropertyName": {
+                  "default": "SharePointListItemId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "listItemIdPropertyName"
+                },
+                "nscaleExpirationPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleExpirationPropertyName"
+                },
+                "nscaleGdprRelevantPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleGdprRelevantPropertyName"
+                },
+                "nscaleLegalHidePropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleLegalHidePropertyName"
+                },
+                "nscaleLegalHoldPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleLegalHoldPropertyName"
+                },
+                "nscaleRetentionPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleRetentionPropertyName"
+                },
+                "parentIdPropertyName": {
+                  "default": "sharePointParentId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "parentIdPropertyName"
+                },
+                "sharePointChangeTokenPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointChangeTokenPropertyName"
+                },
+                "sharePointCreatedPropertyName": {
+                  "default": "SharePointCreated",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointCreatedPropertyName"
+                },
+                "sharePointCreatorPropertyName": {
+                  "default": "SharePointCreator",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointCreatorPropertyName"
+                },
+                "sharePointEditedPropertyName": {
+                  "default": "SharePointLastModified",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointEditedPropertyName"
+                },
+                "sharePointEditorPropertyName": {
+                  "default": "SharePointEditor",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointEditorPropertyName"
+                },
+                "stubIdPropertyName": {
+                  "default": "SharePointStubId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "stubIdPropertyName"
+                },
+                "stubListItemIdPropertyName": {
+                  "default": "SharePointStubListItemId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "stubListItemIdPropertyName"
+                },
+                "webUrlPropertyName": {
+                  "default": "sharePointWebUrl",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "webUrlPropertyName"
+                }
+              },
+              "title": "connector",
+              "type": "object"
+            },
+            "doInitialCrawl": {
+              "default": "false",
+              "description": "toggle initial crawling. This value is mandatory.",
+              "title": "doInitialCrawl"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "sharepoint-connector",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.2.1400.2024073012",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/nscale_spc",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "management": {
+              "additionalProperties": false,
+              "properties": {
+                "port": {
+                  "default": "18098",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "port"
+                },
+                "security": {
+                  "default": "false",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "security"
+                },
+                "ssl": {
+                  "default": "false",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "ssl"
+                }
+              },
+              "title": "management",
+              "type": "object"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8098",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8498",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "sharepoint-connector",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "sharepoint",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/sharepoint-connector/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/sharepoint-connector/bin/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "baseFolder": {
+                  "default": "",
+                  "description": "The base folder, this component should write to",
+                  "title": "baseFolder"
+                },
+                "docArea": {
+                  "default": "",
+                  "description": "The document area, this component should write to",
+                  "title": "docArea"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "parallelRequests": {
+              "default": "5",
+              "description": "amount of parallel requests",
+              "title": "parallelRequests"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "this is fix to 1 @ignore",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "sharepoint": {
+              "additionalProperties": false,
+              "properties": {
+                "clientCertPw": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "clientCertPw"
+                },
+                "clientId": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "clientId"
+                },
+                "doCheckOut": {
+                  "default": "false",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "doCheckOut"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "secret"
+                },
+                "serviceBusConnectionString": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusConnectionString"
+                },
+                "serviceBusQueueName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusQueueName"
+                },
+                "serviceBusRetentionConnectionString": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusRetentionConnectionString"
+                },
+                "serviceBusRetentionQueueName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusRetentionQueueName"
+                },
+                "serviceBusTopicNameConfigUpdate": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusTopicNameConfigUpdate"
+                },
+                "spHost": {
+                  "default": "https://example.com",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "spHost"
+                },
+                "tenantId": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "tenantId"
+                },
+                "triggerProperty": {
+                  "default": "toBeArchived",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "triggerProperty"
+                },
+                "webUserPw": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "webUserPw"
+                }
+              },
+              "title": "sharepoint",
+              "type": "object"
+            },
+            "ssl": {
+              "additionalProperties": false,
+              "properties": {
+                "keyAlias": {
+                  "default": "https",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keyAlias"
+                },
+                "keyPassword": {
+                  "default": "secret",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keyPassword"
+                },
+                "keystore": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystore"
+                },
+                "keystorePassword": {
+                  "default": "secret",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystorePassword"
+                },
+                "keystoreSecret": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystoreSecret"
+                }
+              },
+              "title": "ssl",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-sharepoint",
+          "type": "object"
+        },
+        "sharepointd": {
+          "description": "nscale SharePoint Connector, providing SP archiving to the Instance",
+          "properties": {
+            "clusterService": {
+              "additionalProperties": false,
+              "properties": {
+                "contextPath": {
+                  "default": "",
+                  "description": "set the contextPath (url) for the SharePoint Cluster Service (for GET requests to a group of sharepoint instances)",
+                  "title": "contextPath"
+                },
+                "enabled": {
+                  "default": false,
+                  "title": "enabled",
+                  "type": "boolean"
+                }
+              },
+              "title": "clusterService",
+              "type": "object"
+            },
+            "connector": {
+              "additionalProperties": false,
+              "properties": {
+                "cTagPropertyName": {
+                  "default": "cTag",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "cTagPropertyName"
+                },
+                "eTagPropertyName": {
+                  "default": "eTag",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "eTagPropertyName"
+                },
+                "idPropertyName": {
+                  "default": "sharePointId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "idPropertyName"
+                },
+                "listItemIdPropertyName": {
+                  "default": "SharePointListItemId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "listItemIdPropertyName"
+                },
+                "nscaleExpirationPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleExpirationPropertyName"
+                },
+                "nscaleGdprRelevantPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleGdprRelevantPropertyName"
+                },
+                "nscaleLegalHidePropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleLegalHidePropertyName"
+                },
+                "nscaleLegalHoldPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleLegalHoldPropertyName"
+                },
+                "nscaleRetentionPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "nscaleRetentionPropertyName"
+                },
+                "parentIdPropertyName": {
+                  "default": "sharePointParentId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "parentIdPropertyName"
+                },
+                "sharePointChangeTokenPropertyName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointChangeTokenPropertyName"
+                },
+                "sharePointCreatedPropertyName": {
+                  "default": "SharePointCreated",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointCreatedPropertyName"
+                },
+                "sharePointCreatorPropertyName": {
+                  "default": "SharePointCreator",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointCreatorPropertyName"
+                },
+                "sharePointEditedPropertyName": {
+                  "default": "SharePointLastModified",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointEditedPropertyName"
+                },
+                "sharePointEditorPropertyName": {
+                  "default": "SharePointEditor",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "sharePointEditorPropertyName"
+                },
+                "stubIdPropertyName": {
+                  "default": "SharePointStubId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "stubIdPropertyName"
+                },
+                "stubListItemIdPropertyName": {
+                  "default": "SharePointStubListItemId",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "stubListItemIdPropertyName"
+                },
+                "webUrlPropertyName": {
+                  "default": "sharePointWebUrl",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "webUrlPropertyName"
+                }
+              },
+              "title": "connector",
+              "type": "object"
+            },
+            "doInitialCrawl": {
+              "default": "false",
+              "description": "toggle initial crawling. This value is mandatory.",
+              "title": "doInitialCrawl"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "sharepoint-connector",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.2.1400.2024073012",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/nscale_spc",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "management": {
+              "additionalProperties": false,
+              "properties": {
+                "port": {
+                  "default": "18098",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "port"
+                },
+                "security": {
+                  "default": "false",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "security"
+                },
+                "ssl": {
+                  "default": "false",
+                  "description": "see mail from Manuel, 30.7.2024",
+                  "title": "ssl"
+                }
+              },
+              "title": "management",
+              "type": "object"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8098",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8498",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "sharepoint-connector",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "sharepoint",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/sharepoint-connector/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/sharepoint-connector/bin/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "baseFolder": {
+                  "default": "",
+                  "description": "The base folder, this component should write to",
+                  "title": "baseFolder"
+                },
+                "docArea": {
+                  "default": "",
+                  "description": "The document area, this component should write to",
+                  "title": "docArea"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "parallelRequests": {
+              "default": "5",
+              "description": "amount of parallel requests",
+              "title": "parallelRequests"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "this is fix to 1 @ignore",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "sharepoint": {
+              "additionalProperties": false,
+              "properties": {
+                "clientCertPw": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "clientCertPw"
+                },
+                "clientId": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "clientId"
+                },
+                "doCheckOut": {
+                  "default": "false",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "doCheckOut"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "secret"
+                },
+                "serviceBusConnectionString": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusConnectionString"
+                },
+                "serviceBusQueueName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusQueueName"
+                },
+                "serviceBusRetentionConnectionString": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusRetentionConnectionString"
+                },
+                "serviceBusRetentionQueueName": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusRetentionQueueName"
+                },
+                "serviceBusTopicNameConfigUpdate": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "serviceBusTopicNameConfigUpdate"
+                },
+                "spHost": {
+                  "default": "https://example.com",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "spHost"
+                },
+                "tenantId": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "tenantId"
+                },
+                "triggerProperty": {
+                  "default": "toBeArchived",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "triggerProperty"
+                },
+                "webUserPw": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "webUserPw"
+                }
+              },
+              "title": "sharepoint",
+              "type": "object"
+            },
+            "ssl": {
+              "additionalProperties": false,
+              "properties": {
+                "keyAlias": {
+                  "default": "https",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keyAlias"
+                },
+                "keyPassword": {
+                  "default": "secret",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keyPassword"
+                },
+                "keystore": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystore"
+                },
+                "keystorePassword": {
+                  "default": "secret",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystorePassword"
+                },
+                "keystoreSecret": {
+                  "default": "",
+                  "description": "Documentation pending until official release of *nscale SharePoint Connector* by *Ceyoniq*",
+                  "title": "keystoreSecret"
+                }
+              },
+              "title": "ssl",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-sharepoint",
+          "type": "object"
+        },
+        "toolbox": {
+          "description": "Installs the environment toolbox with git and nstore downloader installed, also serving as target for pool copy actions in the pipeline",
+          "properties": {
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "toolbox2",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "cr.nplus.cloud/subscription",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "1.2.1300",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "envtoolbox",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta",
+              "type": "object"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "nstoreDownloader": {
+              "additionalProperties": false,
+              "description": "yaml-language-server: $schema=values.schema.json",
+              "properties": {
+                "enabled": {
+                  "default": "false",
+                  "description": "enables the nstore downloader",
+                  "title": "enabled"
+                },
+                "nstore": {
+                  "default": "`https://nstore.ceyoniq.com...`",
+                  "description": "set the nstore URL",
+                  "title": "nstore"
+                },
+                "target": {
+                  "default": "pool/nstore",
+                  "description": "target directory in the conf pv",
+                  "title": "target"
+                }
+              },
+              "title": "nstoreDownloader",
+              "type": "object"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "1",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "512Mi",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "1m",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "64Mi",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            }
+          },
+          "title": "nplus-environment-toolbox",
+          "type": "object"
+        },
+        "web": {
+          "description": "nscale Web, providing a modern Web UI to nscale users",
+          "properties": {
+            "authType": {
+              "default": "",
+              "description": "Set the authentication type login, basic, negotiate, implicit ntlmv2, kerberos",
+              "title": "authType"
+            },
+            "customizingMode": {
+              "default": "",
+              "description": "If this setting is enabled, layouts will update immediately when changes are made. It is no longer necessary to re-register or restart the service. If this setting is not activated, the automatic update of the metamodel is turned off. We recommend not using this setting in productive systems because it reduces system performance.",
+              "title": "customizingMode"
+            },
+            "disableUsernamePassword": {
+              "default": "",
+              "description": "surpresses the login dialog",
+              "title": "disableUsernamePassword"
+            },
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "application-layer-web",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1300.2024121620",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "immediateFederatedLogin": {
+              "default": "",
+              "description": "directly log in via identity providers",
+              "title": "immediateFederatedLogin"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/nscale_web",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "XtConLoadBalancerSession",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8090",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8453",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "web-client",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "web",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "metamodelMode": {
+              "default": "",
+              "description": "Refreshes the metamodel mode",
+              "title": "metamodelMode"
+            },
+            "minReplicaCount": {
+              "default": "",
+              "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+              "title": "minReplicaCount"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/application-layer-web/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "defaultConfig": {
+                  "default": "{{ .component.fullName }}-defaultconfig",
+                  "description": "Sets a configMap with default configuration files that get copied to a new and empty container just before the template folder gets copied. Existing files are not overwritten.",
+                  "title": "defaultConfig"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "medium": {
+                      "default": "",
+                      "description": "the medium for the emptyDisk volume if you unset it, it drops it from the manifest",
+                      "title": "medium"
+                    },
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-server/application-layer-web/apache/logs/",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "5Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "oauthDomains": {
+              "default": "",
+              "description": "OAuth nscale domains",
+              "title": "oauthDomains"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "sameSite": {
+              "default": "",
+              "description": "nscale SameSite Cookie Header",
+              "title": "sameSite"
+            },
+            "samlDomains": {
+              "default": "",
+              "description": "SAML nscale domains",
+              "title": "samlDomains"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "smartCrossgrade": {
+              "default": "",
+              "description": "Enable Crossgrade for Smart Layouts",
+              "title": "smartCrossgrade"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "updateStrategy": {
+              "default": "",
+              "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+              "title": "updateStrategy"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-web",
+          "type": "object"
+        },
+        "webdav": {
+          "description": "nscale WebDAV Connector, providing a standard WebDAV interface to the Instance",
+          "properties": {
+            "env": {
+              "default": "",
+              "description": "Sets additional environment variables for the configuration.",
+              "title": "env"
+            },
+            "envMap": {
+              "default": "",
+              "description": "Sets the name of a configMap, which holds additional environment variables for the configuration. It is added as envFrom configMap to the container.",
+              "title": "envMap"
+            },
+            "envSecret": {
+              "default": "",
+              "description": "Sets the name of a secret, which holds additional environment variables for the configuration. It is added as envFrom secretRef to the container.",
+              "title": "envSecret"
+            },
+            "fullnameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal fullname function",
+              "title": "fullnameOverride"
+            },
+            "global": {
+              "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+              "title": "global",
+              "type": "object"
+            },
+            "globals": {
+              "description": "nplus Global Functions Library Chart",
+              "properties": {
+                "global": {
+                  "description": "Global values are values that can be accessed from any chart or subchart by exactly the same name.",
+                  "title": "global",
+                  "type": "object"
+                }
+              },
+              "title": "nplus-globals",
+              "type": "object"
+            },
+            "image": {
+              "additionalProperties": false,
+              "description": "provide the image to be used for this component",
+              "properties": {
+                "name": {
+                  "default": "webdav-connector",
+                  "description": "the name of the image to use",
+                  "title": "name"
+                },
+                "pullPolicy": {
+                  "default": "IfNotPresent",
+                  "title": "pullPolicy",
+                  "type": "string"
+                },
+                "pullSecrets": {
+                  "description": "you can provide your own pullSecrets, in case you use a private repo.",
+                  "items": {
+                    "anyOf": [
+                      {
+                        "type": "string"
+                      },
+                      {
+                        "type": "string"
+                      }
+                    ]
+                  },
+                  "title": "pullSecrets"
+                },
+                "repo": {
+                  "default": "ceyoniq.azurecr.io/release/nscale",
+                  "description": "if you use a private repo, feel free to set it here",
+                  "title": "repo"
+                },
+                "tag": {
+                  "default": "ubi.9.3.1000.2024091609",
+                  "description": "the tag of the image to use",
+                  "title": "tag"
+                }
+              },
+              "title": "image"
+            },
+            "ingress": {
+              "additionalProperties": false,
+              "description": "Ingress defines wether this component is reachable via an ingress controller, Layer 7, through http(s)",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "Adds extra Annotations to the ingress",
+                  "title": "annotations"
+                },
+                "backendProtocol": {
+                  "default": "`http` <br> `https` in zero trust mode",
+                  "description": "Overrides the default backend protocol. The default is http, unless in zeroTrust Mode, then it is switched to https automatically.",
+                  "title": "backendProtocol"
+                },
+                "class": {
+                  "default": "`public`",
+                  "description": "The ingressclass to use for this ingress. Most likely, this is provided globally by the  instance, but you are free to override it here if this component should use a different class e.g. if you have separated ingress controllers, like a public and an internal one",
+                  "title": "class"
+                },
+                "contextPath": {
+                  "default": "/dav",
+                  "description": "The default service context path for this ingress. Some components allow to change this (e.g. SharePoint), for the most though this is only a constant used in the scripts.",
+                  "title": "contextPath"
+                },
+                "cookie": {
+                  "default": "",
+                  "description": "on component level, set cookie affinity for the ingress example: `XtConLoadBalancerSession` for nscale Web",
+                  "title": "cookie"
+                },
+                "deny": {
+                  "default": "",
+                  "description": "deny is used to exclude specific paths from public access, such as administrative paths. For Example, in nappl, webc ist the hessian protocol, webb is the burlap protocol. The configuration service is the endpoint used by the Admin client.",
+                  "title": "deny"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "Sets the domain to be used. This domain should be provided by the instance globally for all components, but you are free to override it here",
+                  "title": "domain"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "You can toggle the ingress on wether you'd like this component to be reachable through an ingress or not.",
+                  "title": "enabled"
+                },
+                "inputPath": {
+                  "default": "",
+                  "description": "defines the path for a potential rewriting to `rewriteTarget`. Do not change unless you have a good reason Example: `/nscalealinst1(/\\|$)(.*)` @internal -- This is an alpha feature - do not use it.",
+                  "title": "inputPath"
+                },
+                "namespace": {
+                  "default": "\"ingress, kube-system, ingress-nginx\"",
+                  "description": "Specify the namespace in which the ingress controller runs. This sets the firewall rule / networkPolicy to allow traffic from this namespace to our pods. This may be a comma separated list",
+                  "title": "namespace"
+                },
+                "proxyReadTimeout": {
+                  "default": "",
+                  "description": "Sets the annotation `nginx.ingress.kubernetes.io/proxy-read-timeout` on the ingress object, if set.",
+                  "title": "proxyReadTimeout"
+                },
+                "rewriteTarget": {
+                  "default": "",
+                  "description": "defines a rewriteTarget for a potential retriting of `inputPath`. Do not change unless you have a good reason Example: `/nscalealinst1/$2` @internal -- This is an alpha feature - do not use it.",
+                  "title": "rewriteTarget"
+                },
+                "secret": {
+                  "default": "`{{ .this.ingress.domain }}-tls`",
+                  "description": "Sets the name of the tls secret to be used for this ingress, that contains the private and public key. These secrets can optionally be provided by the instance",
+                  "title": "secret"
+                },
+                "whitelist": {
+                  "default": "",
+                  "description": "optionally sets a whitelist of ip ranges (CIDR format, comma separated) from which ingress is allowed. This is an annotation for nginx, so won't work with other ingress controllers",
+                  "title": "whitelist"
+                }
+              },
+              "title": "ingress"
+            },
+            "javaOpts": {
+              "additionalProperties": false,
+              "description": "Options for the Java VM",
+              "properties": {
+                "javaMaxMem": {
+                  "default": "",
+                  "description": "set the maximum memory, java will consume. Attention: This is NOT the real maximum and it does not include any non Java memory. Please read google, as this is highly discussed",
+                  "title": "javaMaxMem"
+                },
+                "javaMaxRamPercentage": {
+                  "default": "",
+                  "description": "set the percentage of RAM, Java will use of the total. The total amount is the amount installed in the K8s Cluster Node, OR the Memory Limit set (see resources), if any.",
+                  "title": "javaMaxRamPercentage"
+                },
+                "javaMinMem": {
+                  "default": "",
+                  "description": "set the minimum memory, java will consume",
+                  "title": "javaMinMem"
+                },
+                "javaMisc": {
+                  "default": "",
+                  "description": "Any misc Java Options that need to be passed to the container",
+                  "title": "javaMisc"
+                }
+              },
+              "title": "javaOpts"
+            },
+            "meta": {
+              "additionalProperties": false,
+              "description": "defines internal constants for nplus. do not change these values",
+              "properties": {
+                "componentVersion": {
+                  "default": "",
+                  "description": "This is the version of the component, used for display @internal -- set by devOps pipeline, so do not modify",
+                  "title": "componentVersion"
+                },
+                "language": {
+                  "default": "java",
+                  "description": "Sets the language of the main service (in the *service* container). This is used for instance if you turn OpenTelemetry on, to know which Agent to inject into the container.",
+                  "title": "language"
+                },
+                "ports": {
+                  "additionalProperties": false,
+                  "description": "lists the ports this component exposes. This is important for zero trust mode and others.",
+                  "properties": {
+                    "http": {
+                      "default": "8088",
+                      "description": "The http port this component uses (if any). In zero trust mode, this will be disabled. @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "http"
+                    },
+                    "https": {
+                      "default": "8488",
+                      "description": "The tls / https port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "https"
+                    },
+                    "rmi": {
+                      "default": "",
+                      "description": "A potential rmi port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "rmi"
+                    },
+                    "tcp": {
+                      "default": "",
+                      "description": "A potential tcp port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcp"
+                    },
+                    "tcps": {
+                      "default": "",
+                      "description": "A potential tls / tcps port, this component uses (if any) @internal -- this is a constant value of the component and should not be changed.",
+                      "title": "tcps"
+                    }
+                  },
+                  "title": "ports"
+                },
+                "provider": {
+                  "default": "",
+                  "description": "sets provider (partner, reseller) information to be able to invoice per use in a cloud environment",
+                  "title": "provider"
+                },
+                "serviceContainer": {
+                  "default": "webdav-connector",
+                  "description": "The container name of the main service for this component. This is used to define where to inject the telemetry agents, if any",
+                  "title": "serviceContainer"
+                },
+                "stage": {
+                  "default": "",
+                  "description": "A optional parameter to indicate the stage (DEV, QA, PROD, ...) this component, instance or environment runs in. This can be used in template functions to add the stage to for instance the service name of telemetry services like open telemetry. (see telemetry example)",
+                  "title": "stage"
+                },
+                "tenant": {
+                  "default": "",
+                  "description": "sets tenant information to be able to invoice per use in a cloud environment",
+                  "title": "tenant"
+                },
+                "type": {
+                  "default": "webdav",
+                  "description": "the type of the component. You should not change this value, except if you use a pipeliner in core mode. In core mode, it should be *core*, else *pipeliner* This type is used to create cluster communication for nappl and nstl and potentially group multiple replicaSets into one service.",
+                  "title": "type"
+                },
+                "wave": {
+                  "default": "",
+                  "description": "Sets the wave in which this component should be deployed within an ArgoCD deployment if unset, it uses the default wave thus all components are installed in one wave, then relying on correct wait settings just like in a helm installation",
+                  "title": "wave"
+                }
+              },
+              "title": "meta"
+            },
+            "minReplicaCount": {
+              "default": "",
+              "description": "if you set minReplicaCount, a podDesruptionBudget will be created with this value as minAvailable, using the full component as selector. This is useful for components, that are using multiple replicas.",
+              "title": "minReplicaCount"
+            },
+            "minReplicaCountType": {
+              "default": "",
+              "description": "if you set minReplicaCountType, a podDesruptionBudget will be created with this value as minAvailable, using the component type as selector. This is useful for components, that are spread across multiple replicaSets, like sharepoint or storage layer",
+              "title": "minReplicaCountType"
+            },
+            "mounts": {
+              "additionalProperties": false,
+              "properties": {
+                "caCerts": {
+                  "additionalProperties": false,
+                  "description": "You can add a file with trusted Root Certificates (e.g. Azure), to be able to connect to alien services via https. If you have a self-signed root certificate, you can also add it here.",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the certs folder. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "caCerts"
+                },
+                "componentCerts": {
+                  "additionalProperties": false,
+                  "description": "the java based nscale components have their own certificates, that you might want to upload. You can normally do so via the environment configuration, but should you want to use a secret, you can set it here",
+                  "properties": {
+                    "configMap": {
+                      "default": "",
+                      "description": "Alternative 2: the name of the configMap to use. The Key has to be the File Name used in the path setting",
+                      "title": "configMap"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets the path to the component certs. @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "secret": {
+                      "default": "",
+                      "description": "Alternative 1: the name of the secret to use. The Key has to be the File Name used in the path setting",
+                      "title": "secret"
+                    }
+                  },
+                  "title": "componentCerts"
+                },
+                "conf": {
+                  "additionalProperties": false,
+                  "description": "The conf volume is a RWX volume mounted by the environment, that holds all configurations of all instances and components in this environment",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-webdav/conf",
+                      "description": "Sets the path to the conf files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the conf files @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "conf"
+                },
+                "data": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the data disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the data files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the data disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "data",
+                  "type": "object"
+                },
+                "disk": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the disk",
+                      "title": "class"
+                    },
+                    "enabled": {
+                      "default": "false",
+                      "description": "enables the use of the second data disk. If enabled, all paths defined will end up on this disk. In case of the (default) disabled, the paths will be added to the primaty data disk.",
+                      "title": "enabled"
+                    },
+                    "migration": {
+                      "default": "false",
+                      "description": "Enables the migration init container. This will copy the data in paths from the primary data disk to the newly enabled secondary disk. This is done only once and only if there is legacy data at all. No files are overwritten!",
+                      "title": "migration"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the disk files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the data files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "disk",
+                  "type": "object"
+                },
+                "file": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "class": {
+                      "default": "",
+                      "description": "Sets the class of the shared disk",
+                      "title": "class"
+                    },
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the shared files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the shared files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "",
+                      "description": "Sets the size of the shared disk",
+                      "title": "size"
+                    },
+                    "volumeName": {
+                      "default": "",
+                      "description": "If you do not want to have a Volume created by the provisioner, you can set the name of your volume here to attach to this pre-existing one",
+                      "title": "volumeName"
+                    }
+                  },
+                  "title": "file",
+                  "type": "object"
+                },
+                "fonts": {
+                  "additionalProperties": false,
+                  "description": "If you want to use additional fonts like the msttcorefonts (Microsoft Core Fonts). This mounts the fonts directory from the environment pool",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the fonts folder. @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "fonts"
+                },
+                "generic": {
+                  "default": "",
+                  "description": "Allows to define generic mounts of pre-provisioned PVs into any container. This can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.",
+                  "title": "generic"
+                },
+                "license": {
+                  "additionalProperties": false,
+                  "description": "some nscale Components require a license file and this defines it's location",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the license files @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "license"
+                },
+                "logs": {
+                  "additionalProperties": false,
+                  "description": "The log volume is used to take any left-over logging in the container. The container should log to stdout, but if any component still tries to log to disk this disk needs to be writeable",
+                  "properties": {
+                    "path": {
+                      "default": "/opt/ceyoniq/nscale-webdav/logs",
+                      "description": "Sets the path to the log files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths to the log files @internal -- do not change this value",
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the log disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "logs"
+                },
+                "pool": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to a directory, there the `pool` folder from the `conf` volume should be mounted. this is used to store scripts, apps and assets that are required to deploy an application / solution @internal -- do not change this value",
+                      "title": "path"
+                    }
+                  },
+                  "title": "pool",
+                  "type": "object"
+                },
+                "ptemp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path for temporary files that are persisted @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "default": "",
+                      "description": "Sets a list of paths for temporary files that are persisted @internal -- do not change this value",
+                      "title": "paths"
+                    }
+                  },
+                  "title": "ptemp"
+                },
+                "temp": {
+                  "additionalProperties": false,
+                  "description": "The temp volume is used to hold any superflues and temporary data. it is deleted when the pod terminates. However, it is extremely important as all pods filesystems are read only",
+                  "properties": {
+                    "path": {
+                      "default": "",
+                      "description": "Sets the path to the temporary files @internal -- do not change this value",
+                      "title": "path"
+                    },
+                    "paths": {
+                      "description": "Sets a list of paths to the temporary files @internal -- do not change this value",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "string"
+                          }
+                        ]
+                      },
+                      "title": "paths"
+                    },
+                    "size": {
+                      "default": "1Gi",
+                      "description": "Sets the size of the temporary disk (all paths)",
+                      "title": "size"
+                    }
+                  },
+                  "title": "temp"
+                }
+              },
+              "title": "mounts",
+              "type": "object"
+            },
+            "nameOverride": {
+              "default": "",
+              "description": "This overrides the output of the internal name function",
+              "title": "nameOverride"
+            },
+            "nappl": {
+              "additionalProperties": false,
+              "description": "The nscale Application Layer, this component should talk to",
+              "properties": {
+                "account": {
+                  "default": "",
+                  "description": "The technical account to login with",
+                  "title": "account"
+                },
+                "domain": {
+                  "default": "",
+                  "description": "The domain of the technical account",
+                  "title": "domain"
+                },
+                "host": {
+                  "default": "",
+                  "description": "nappl host name",
+                  "title": "host"
+                },
+                "instance": {
+                  "default": "",
+                  "description": "instance of the Application Layer, likely `instance1`",
+                  "title": "instance"
+                },
+                "password": {
+                  "default": "",
+                  "description": "The password of the technical accunt (if not set by secret)",
+                  "title": "password"
+                },
+                "port": {
+                  "default": "",
+                  "description": "nappl port (http 8080 or https 8443)",
+                  "title": "port"
+                },
+                "secret": {
+                  "default": "",
+                  "description": "An optional secret that holds the credentials (the keys must be `account` and `password`)",
+                  "title": "secret"
+                },
+                "ssl": {
+                  "default": "",
+                  "description": "sets the Advanced Connect to tls",
+                  "title": "ssl"
+                }
+              },
+              "title": "nappl"
+            },
+            "nodeSelector": {
+              "default": "",
+              "description": "select specific nodes for this component",
+              "title": "nodeSelector"
+            },
+            "replicaCount": {
+              "default": "1",
+              "description": "Sets the number of replicas in this replicaSet. Some Components (like nstl or sharepoint) only allow a count of 1.",
+              "title": "replicaCount"
+            },
+            "resources": {
+              "additionalProperties": false,
+              "description": "Assigns hardware resources to container",
+              "properties": {
+                "limits": {
+                  "additionalProperties": false,
+                  "description": "Limits the maximum resources",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "The maximum allowed CPU for the container",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "The maximum allowed RAM for the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "limits"
+                },
+                "requests": {
+                  "additionalProperties": false,
+                  "description": "Requests are used to assign a minimum to a container. This is the guaranteed amount",
+                  "properties": {
+                    "cpu": {
+                      "default": "",
+                      "description": "Set the share of guaranteed CPU to the container.",
+                      "title": "cpu"
+                    },
+                    "memory": {
+                      "default": "",
+                      "description": "Set the share of guaranteed RAM to the container",
+                      "title": "memory"
+                    }
+                  },
+                  "title": "requests"
+                }
+              },
+              "title": "resources"
+            },
+            "security": {
+              "additionalProperties": false,
+              "description": "Security Section defining default runtime environment for your container",
+              "properties": {
+                "containerSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "allowPrivilegeEscalation": {
+                      "default": "false",
+                      "description": "Some functionality may need the possibility to allow privilege escalation. This should be very restrictive @internal -- you should not change this",
+                      "title": "allowPrivilegeEscalation"
+                    },
+                    "capabilities": {
+                      "additionalProperties": false,
+                      "description": "Capabilities this container should have. Only allow the necessity, and drop as many as possible @internal -- you should not change this",
+                      "properties": {
+                        "drop": {
+                          "items": {
+                            "anyOf": [
+                              {
+                                "type": "string"
+                              }
+                            ]
+                          },
+                          "title": "drop",
+                          "type": "array"
+                        }
+                      },
+                      "title": "capabilities"
+                    },
+                    "readOnlyRootFilesystem": {
+                      "default": "true",
+                      "description": "sets the container root file system to read only. This should be the case in production environment @internal -- you should not change this",
+                      "title": "readOnlyRootFilesystem"
+                    }
+                  },
+                  "title": "containerSecurityContext",
+                  "type": "object"
+                },
+                "podSecurityContext": {
+                  "additionalProperties": false,
+                  "properties": {
+                    "fsGroup": {
+                      "default": "1001",
+                      "description": "The file system group as which new files are created @internal -- there is normally no need to change this",
+                      "title": "fsGroup"
+                    },
+                    "fsGroupChangePolicy": {
+                      "default": "OnRootMismatch",
+                      "description": "Under which condition should the fsGroup be changed @internal -- there is normally no need to change this",
+                      "title": "fsGroupChangePolicy"
+                    },
+                    "runAsUser": {
+                      "default": "1001",
+                      "description": "The user under which the container ist run. Avoid 0 / root. The container should run in a non-root context for security @internal -- there is normally no need to change this",
+                      "title": "runAsUser"
+                    }
+                  },
+                  "title": "podSecurityContext",
+                  "type": "object"
+                },
+                "zeroTrust": {
+                  "default": "`false`",
+                  "description": "turns on *Zero Trust* Mode, disabling *all* http communication, even the internal http probes",
+                  "title": "zeroTrust"
+                }
+              },
+              "title": "security"
+            },
+            "service": {
+              "additionalProperties": false,
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "adds extra Annotations to the service",
+                  "title": "annotations"
+                },
+                "enabled": {
+                  "default": "true",
+                  "description": "enables the service to be consumed by group components and a potential ingress Disabling the service also disables the ingress.",
+                  "title": "enabled"
+                },
+                "selector": {
+                  "default": "component",
+                  "description": "The selector can be `component` or `type` *component* selects only pods that are in the replicaset. *type* selects any pod that has the given type",
+                  "title": "selector"
+                }
+              },
+              "title": "service",
+              "type": "object"
+            },
+            "telemetry": {
+              "additionalProperties": false,
+              "description": "Settings for telemetry tools",
+              "properties": {
+                "openTelemetry": {
+                  "default": "",
+                  "description": "turns Open Telemetry on",
+                  "title": "openTelemetry"
+                },
+                "serviceName": {
+                  "default": "",
+                  "description": "Sets the service name for the telemetry service to more convenient identify the displayed component Example: \"{{ .this.meta.type }}-{{ .instance.name }}\"",
+                  "title": "serviceName"
+                }
+              },
+              "title": "telemetry"
+            },
+            "template": {
+              "additionalProperties": false,
+              "description": "provide extra settings for pod templates",
+              "properties": {
+                "annotations": {
+                  "default": "",
+                  "description": "set additional annotations for pods",
+                  "title": "annotations"
+                },
+                "labels": {
+                  "default": "",
+                  "description": "set additional labels for pods",
+                  "title": "labels"
+                }
+              },
+              "title": "template"
+            },
+            "terminationGracePeriodSeconds": {
+              "default": "",
+              "description": "Sets the terminationGracePeriodSeconds for the component If not set, it uses the Kubernetes defaults",
+              "title": "terminationGracePeriodSeconds"
+            },
+            "timezone": {
+              "default": "`Europe/Berlin`",
+              "description": "set the time zone for this component to make sure log output has a specific timestamp, internal dates and times are correct (like the creationDate in nappl) etc.",
+              "title": "timezone"
+            },
+            "tolerations": {
+              "default": "",
+              "description": "Set tolerations for this component",
+              "title": "tolerations"
+            },
+            "updateStrategy": {
+              "default": "",
+              "description": "the update Strategy for this component. Normally, you can update all components rolling, except for nappl, where you need to follow the documented update procedures.",
+              "title": "updateStrategy"
+            },
+            "utils": {
+              "additionalProperties": false,
+              "properties": {
+                "debug": {
+                  "default": "`false`",
+                  "description": "Turn debugging *on* will give you stack trace etc.  Please check out the Chart Developer Guide",
+                  "title": "debug"
+                },
+                "disableWait": {
+                  "default": "`false`",
+                  "description": "in case you use the argoCD Wave feature, you might think about switching off the waitFor mechanism, that makes sure PODs are only started after pre-requisites are fulfilled. You can disable the starndard wait mechanism, but at your own risk, as this might start components even if they are not intended to run yet.",
+                  "title": "disableWait"
+                },
+                "disableWave": {
+                  "default": "`false`",
+                  "description": "If you use argoCD, you most likely want to use the argo Wave Feature as well, making sure the components of an instance are deployed ordered. However, in DEV you might want to disable this to allow live changing components while previous waves are not finished yet.",
+                  "title": "disableWave"
+                },
+                "includeNamespace": {
+                  "default": "`true`",
+                  "description": "By default, the namespace is rendered into the manifest. However, if you want to use `helm template` and store manifests for later applying them to multiple namespaces, you might want to turn this `false` to be able to use `kubectl apply -n <namespace> -f template.yaml` later",
+                  "title": "includeNamespace"
+                },
+                "maintenance": {
+                  "default": "`false`",
+                  "description": "in Maintenance Mode, all *waitFor* actions will be skipped, the *Health Checks* are ignored and the pods will start in idle, not starting the service at all. This will allow you to gain access to the container to perform recovery and maintenance tasks while having the real container up.",
+                  "title": "maintenance"
+                },
+                "renderComments": {
+                  "default": "`true`",
+                  "description": "You can turn Comment rendering *on* to get descriptive information inside the manifests. It will also fail on depricated functions and keys, so it is recommended to only switch it off in PROD",
+                  "title": "renderComments"
+                }
+              },
+              "title": "utils",
+              "type": "object"
+            },
+            "waitFor": {
+              "default": "",
+              "description": "Defines a list of conditions that need to be met before this components starts. The condition must be a network port that opens, when the master component is ready. Mostly, this will be a service, since a component is only added to a service if the  probes succeed.",
+              "title": "waitFor"
+            }
+          },
+          "title": "nplus-component-webdav",
+          "type": "object"
+        }
+      },
+      "title": "nplus-instance",
+      "type": "object"
+    }
+  },
+  "type": "object"
+}
diff --git a/samples/chart/tenant/values.yaml b/samples/chart/tenant/values.yaml
new file mode 100644
index 0000000..9e958d7
--- /dev/null
+++ b/samples/chart/tenant/values.yaml
@@ -0,0 +1,10 @@
+# yaml-language-server: $schema=values.schema.json
+instance:
+  components:
+    application: true
+  application:
+    docAreas:
+      - id: "Sample"
+global:
+  ingress:
+    domain: "{{ .instance.group | default .Release.Name }}.sample.nplus.cloud"
diff --git a/samples/cluster/README.md b/samples/cluster/README.md
new file mode 100644
index 0000000..c82791f
--- /dev/null
+++ b/samples/cluster/README.md
@@ -0,0 +1,57 @@
+# Preparing the K8s Cluster
+
+*nplus* Charts bring some custom resources, *Application*, *Instance* and *Component*. they are created during deployment of a chart and then updated by the environment operator every time the status changes.
+
+To make this work, you will need to have the *Custom Resource Definitions* applied to your cluster prior to deploying any environment or component. This deployment is handled by the *Cluster Chart*.
+
+```bash
+helm install nplus/nplus-cluster
+```
+
+The *CRDs* are grouped into *nscale* and *nplus* (both synonym), so that you can either query for
+
+```bash
+kubectl get instance
+kubectl get component
+kubectl get application
+```
+
+or simply all at once with
+
+```bash
+kubectl get nscale -A
+```
+
+the output looks like this (shortened output, showing the installed samples):
+
+```bash
+$ kubectl get nscale -A
+NAMESPACE   NAME                                                    INSTANCE                     COMPONENT       TYPE            VERSION        STATUS
+empty-sim   component.nplus.cloud/database                          empty-sim                    database        database        16             healthy
+empty-sim   component.nplus.cloud/nappl                             empty-sim                    nappl           core            9.2.1302       healthy
+lab         component.nplus.cloud/demo-centralservices-s3-nstl      demo-centralservices-s3      nstl            nstl            9.2.1302       healthy
+lab         component.nplus.cloud/demo-ha-web                       demo-ha                      web             web             9.2.1300       redundant
+lab         component.nplus.cloud/demo-ha-webdav                    demo-ha                      webdav          webdav          9.2.1000       redundant
+lab         component.nplus.cloud/demo-ha-zerotrust-administrator   demo-ha-zerotrust            administrator   administrator   9.2.1300       healthy
+lab         component.nplus.cloud/no-provisioner-nstl               no-provisioner               nstl            nstl            9.2.1302       healthy
+lab         component.nplus.cloud/no-provisioner-rs                 no-provisioner               rs              rs              9.2.1201       starting
+lab         component.nplus.cloud/no-provisioner-web                no-provisioner               web             web             9.2.1300       healthy
+lab         component.nplus.cloud/sbs-nappl                         sbs                          nappl           core            9.2.1302       healthy
+
+NAMESPACE   NAME                                                    INSTANCE            APPLICATION   VERSION        STATUS
+empty-sim   application.nplus.cloud/application                     empty-sim           application   9.2.1303-123   healthy
+empty-sim   application.nplus.cloud/prepper                         empty-sim           prepper       1.2.1300       healthy
+lab         application.nplus.cloud/demo-ha-zerotrust-application   demo-ha-zerotrust   application   9.2.1303-123   healthy
+lab         application.nplus.cloud/demo-shared-application         demo-shared         application   9.2.1303-123   healthy
+lab         application.nplus.cloud/sbs-sbs                         sbs                 SBS           9.2.1303-123   healthy
+lab         application.nplus.cloud/tenant-application              tenant              application   9.2.1303-123   healthy
+
+NAMESPACE   NAME                                              HANDLER   VERSION    TENANT   STATUS
+empty-sim   instance.nplus.cloud/empty-sim                    manual    9.2.1302            healthy
+lab         instance.nplus.cloud/default                      manual    9.2.1302            healthy
+lab         instance.nplus.cloud/demo-centralservices         manual    9.2.1302            healthy
+lab         instance.nplus.cloud/rms                          manual    9.2.1302            healthy
+lab         instance.nplus.cloud/sbs                          manual    9.2.1302            healthy
+lab         instance.nplus.cloud/tenant                       manual    9.2.1302            healthy
+```
+
diff --git a/samples/cluster/build.sh b/samples/cluster/build.sh
new file mode 100755
index 0000000..3e9de0d
--- /dev/null
+++ b/samples/cluster/build.sh
@@ -0,0 +1,36 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The name of the sample
+SAMPLE=cluster
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/$SAMPLE" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/$SAMPLE not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Output what is happening
+echo "Building $SAMPLE"
+
+# Create the manifest
+mkdir -p $DEST/cluster
+helm template --debug \
+     nplus $CHARTS/cluster > $DEST/cluster/nplus.yaml
diff --git a/samples/default/README.md b/samples/default/README.md
new file mode 100644
index 0000000..abf42f8
--- /dev/null
+++ b/samples/default/README.md
@@ -0,0 +1 @@
+This is the most simple example: It renders a default instance wihout any values at all.
diff --git a/samples/default/build.sh b/samples/default/build.sh
new file mode 100755
index 0000000..4c632f3
--- /dev/null
+++ b/samples/default/build.sh
@@ -0,0 +1,38 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+SAMPLE="default"
+NAME="sample-$SAMPLE"
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     $NAME $CHARTS/instance > $DEST/instance/default.yaml
diff --git a/samples/detached/README.md b/samples/detached/README.md
new file mode 100644
index 0000000..f4b1ae8
--- /dev/null
+++ b/samples/detached/README.md
@@ -0,0 +1,55 @@
+# Using detached applications
+
+All the other samples use an application that is deployed **inside of an instance**. However, you can also deploy an application **detached** from the instance as a solo chart.
+
+The reason for this is, that you
+
+- can update the instance without running the application update
+- update the application without touching the instance
+- have multiple applications deployed within one instance
+
+There are two major things you need to do:
+
+1. make sure the application charts sets the instance name of the instance, it should connect to
+2. take the default values of the application match the ones it would get by an instance deployment
+
+This is a sample: (find the complete one in the [application.yaml](application.yaml))
+
+```yaml
+nameOverride: SBS
+docAreas:
+  - id: "SBS"
+    name: "DocArea with SBS"
+    description: "This is a sample DocArea with the SBS Apps installed"
+    apps:
+    ...
+
+instance:
+  # this is the name of the instance, it should belong to
+  name: "sample-detached"
+
+# make sure it can wait for the nappl of the instance to be ready, before it deploys.
+waitImage:
+  repo: cr.nplus.cloud/subscription
+  name: toolbox2
+  tag: 1.2.1300
+  pullPolicy: IfNotPresent
+waitFor:
+  - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+
+# Now we define where and what to deploy 
+nappl:
+  host: "{{ .component.prefix }}nappl.{{ .Release.Namespace }}"
+  port: 8080
+  ssl: false
+  instance: "nscalealinst1"
+  account: admin
+  domain: nscale
+  password: admin
+  secret:
+nstl:
+  host: "{{ .component.prefix }}nstl.{{ .Release.Namespace }}"
+rs:
+  host: "{{ .component.prefix }}rs.{{ .Release.Namespace }}"
+```
+
diff --git a/samples/detached/application.yaml b/samples/detached/application.yaml
new file mode 100644
index 0000000..e06c12f
--- /dev/null
+++ b/samples/detached/application.yaml
@@ -0,0 +1,56 @@
+nameOverride: SBS
+docAreas:
+  - id: "SBS"
+    name: "DocArea with SBS"
+    description: "This is a sample DocArea with the SBS Apps installed"
+    apps:
+    - "/pool/nstore/bl-app-9.0.1202.zip"
+    - "/pool/nstore/gdpr-app-9.0.1302.zip"
+    - "/pool/nstore/sbs-base-9.0.1302.zip"
+    - "/pool/nstore/sbs-app-9.0.1302.zip"
+    - "/pool/nstore/tmpl-app-9.0.1302.zip"
+    - "/pool/nstore/cm-base-9.0.1302.zip"
+    - "/pool/nstore/cm-app-9.0.1302.zip"
+    - "/pool/nstore/hr-base-9.0.1302.zip"
+    - "/pool/nstore/hr-app-9.0.1302.zip"
+    - "/pool/nstore/pm-base-9.0.1302.zip"
+    - "/pool/nstore/pm-app-9.0.1302.zip"
+    - "/pool/nstore/sd-base-9.0.1302.zip"
+    - "/pool/nstore/sd-app-9.0.1302.zip"
+    - "/pool/nstore/kon-app-9.0.1302.zip"
+    - "/pool/nstore/kal-app-9.0.1302.zip"
+    - "/pool/nstore/dok-app-9.0.1302.zip"
+    - "/pool/nstore/ts-base-9.0.1302.zip"
+    - "/pool/nstore/ts-app-9.0.1302.zip"
+    - "/pool/nstore/ocr-base-9.0.1302.zip"
+
+resources:
+  requests:
+    cpu: "10m"
+    memory: "512Mi"
+  limits:
+    cpu: "4000m"
+    memory: "2Gi"
+
+instance:
+  name: "sample-detached"
+waitImage:
+  repo: cr.nplus.cloud/subscription
+  name: toolbox2
+  tag: 1.2.1300
+  pullPolicy: IfNotPresent
+nappl:
+  host: "{{ .component.prefix }}nappl.{{ .Release.Namespace }}"
+  port: 8080
+  ssl: false
+  instance: "nscalealinst1"
+  account: admin
+  domain: nscale
+  password: admin
+  secret:
+waitFor:
+  - "-service {{ .component.prefix }}nappl.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+nstl:
+  host: "{{ .component.prefix }}nstl.{{ .Release.Namespace }}"
+rs:
+  host: "{{ .component.prefix }}rs.{{ .Release.Namespace }}"
diff --git a/samples/detached/build.sh b/samples/detached/build.sh
new file mode 100755
index 0000000..8a27feb
--- /dev/null
+++ b/samples/detached/build.sh
@@ -0,0 +1,49 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Set the Variables
+SAMPLE="detached"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+
+mkdir -p $DEST/application
+helm template --debug \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/detached/application.yaml \
+     $NAME-app $CHARTS/application > $DEST/application/$SAMPLE.yaml
diff --git a/samples/environment/README.md b/samples/environment/README.md
new file mode 100644
index 0000000..4121057
--- /dev/null
+++ b/samples/environment/README.md
@@ -0,0 +1,69 @@
+# K8s namespace aka *nplus environment*
+
+*nplus instances* are deployed into K8s namespaces. Always. even if you do not specify a namespace, it uses a namespace: `default`.
+
+In order to use this namespace for *nplus instances*, you need to deploy some shared *nplus components* into it, which are used by the instances. This is done by the environment chart:
+
+```
+helm install \
+  --values demo.yaml \
+  demo nplus/nplus-environment
+```
+
+After that, the K8s namespace is a valid *nplus environment* that can house multiple *nplus instances*.
+
+
+## deploying assets into the environment
+
+Most likely, you will need assets to be used by your instances. Fonts for example: The *nscale Rendition Server* and die *nscale Server Application Layer* both require the Microsoft fonts, that are not allowed to be distributed by neither nscale nor nplus. So this example shows how to upload some missing pieces into the environment:
+
+```
+kubectl cp ./apps/app-installer-9.0.1202.jar nplus-toolbox-0:/conf/pool
+kubectl cp ./fonts nplus-toolbox-0:/conf/pool
+kubectl cp ./copy-snippet.sh nplus-toolbox-0:/conf/pool/scripts
+kubectl cp ./test.md nplus-toolbox-0:/conf/pool/snippets
+kubectl cp ./snc nplus-toolbox-0:/conf/pool
+```
+
+Alternatively, you can also use a `prepper` component, that you can activate on the environment chart, to download assets from any web site and deploy them into the environment:
+
+```
+components:
+  prepper: true
+prepper:
+  download:
+    - "https://git.nplus.cloud/public/nplus/raw/branch/master/assets/sample.tar.gz"
+```
+
+Please see the prepper [README.md](../../charts/prepper/README.md) for more information.
+
+
+## Operator Web UI
+
+The environment comes with the operator, responsible for managing / controlling the [custom resources](../cluster/README.md). It has a Web UI, that can be enabled in the environment chart.
+
+![screenshot operator](assets/operator.png)
+
+## *namespace*-less manifests
+
+Speaking of namespaces: Sometimes you want to drop the namespace from your manifest. This can be done by
+
+```yaml
+utils:
+  includeNamespace: false
+```
+
+when you then call
+
+```bash
+helm template myInstance nplus/nplus-instance > myInstance.yaml
+```
+
+the manifest in `myInstance.yaml` will **not** have a namespace set, so you can apply it to multiple namespaces later:
+
+```bash
+kubectl apply --namespace dev -f myInstance.yaml
+kubectl apply --namespace qa -f myInstance.yaml
+kubectl apply --namespace prod -f myInstance.yaml
+```
+
diff --git a/samples/environment/assets/operator.png b/samples/environment/assets/operator.png
new file mode 100644
index 0000000..d8bc259
Binary files /dev/null and b/samples/environment/assets/operator.png differ
diff --git a/samples/environment/build.sh b/samples/environment/build.sh
new file mode 100755
index 0000000..fb51ca7
--- /dev/null
+++ b/samples/environment/build.sh
@@ -0,0 +1,39 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The name of the sample
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+SAMPLE=environment
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/environment" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/environment not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Output what is happening
+echo "Building $SAMPLE for $KUBE_CONTEXT"
+
+# Create the manifest
+mkdir -p $DEST/environment
+helm template --debug --render-subchart-notes \
+    --values $SAMPLES/$SAMPLE/$KUBE_CONTEXT.yaml \
+    $KUBE_CONTEXT $CHARTS/environment > $DEST/environment/$KUBE_CONTEXT.yaml
+
diff --git a/samples/environment/demo.yaml b/samples/environment/demo.yaml
new file mode 100644
index 0000000..cca05d6
--- /dev/null
+++ b/samples/environment/demo.yaml
@@ -0,0 +1,24 @@
+toolbox:
+  enabled: true
+dav:
+  enabled: true
+nstoreDownloader:
+  enabled: true
+global:
+  environment:
+    utils:
+      renderComments: true
+    ingress:
+      domain: "{{ .instance.group | default .Release.Name }}.demo.nplus.cloud"
+      class: "public"
+      issuer: "nplus-issuer"
+    storage:
+      conf:
+        class: "cephfs"
+      data:
+        class: "ceph-rbd"
+      disk:
+        class: "ceph-rbd"
+      file:
+        class: "cephfs"
+    appInstaller: "/pool/app-installer-9.0.1202.jar"
diff --git a/samples/environment/dev.yaml b/samples/environment/dev.yaml
new file mode 100644
index 0000000..6f7353d
--- /dev/null
+++ b/samples/environment/dev.yaml
@@ -0,0 +1,26 @@
+toolbox:
+  enabled: true
+dav:
+  enabled: true
+nstoreDownloader:
+  enabled: true
+global:
+  environment:
+    ingress:
+      class: "ingress-internal"
+      domain: "{{ .instance.group | default .Release.Name }}.dev.nplus.cloud"
+      issuer: "nplus-issuer"
+    storage:
+      conf:
+        class: "pv-af-auto"
+      data:
+        class: "pv-disk-auto"
+      file:
+        class: "pv-af-auto"
+    appInstaller: "/pool/app-installer-9.0.1202.jar"
+    security:
+      illumio:
+        enabled: true
+        loc: "samples"
+        supplier: "42i"
+        platform: "nplus.cloud"
diff --git a/samples/environment/lab.yaml b/samples/environment/lab.yaml
new file mode 100644
index 0000000..50ad281
--- /dev/null
+++ b/samples/environment/lab.yaml
@@ -0,0 +1,48 @@
+toolbox:
+  enabled: true
+  nstoreDownloader:
+    enabled: true
+dav:
+  enabled: true
+nappl:
+  ingress:
+    enabled: true
+
+# -- In the lab / dev environment, we quite often throw away the data disk while keeping the conf folder
+# the default for the DA_HID.DAT is the conf folder, so they do not match any more.
+# So we switch the check off here.
+nstl:
+  checkHighestDocId: "0"
+nstla:
+  checkHighestDocId: "0"
+nstlb:
+  checkHighestDocId: "0"
+
+global:
+  environment:
+    ingress:
+      domain: "{{ .instance.group | default .Release.Name }}.lab.nplus.cloud"
+      class: "public"
+      issuer: "nplus-issuer"
+      whitelist: "192.168.0.0/16,10.0.0.0/8"
+      namespace: ingress
+      # proxyReadTimeout: "360s"
+    storage:
+      conf:
+        class: "cephfs"
+      ptemp:
+        class: "cephfs"
+      data:
+        class: "ceph-rbd"
+      disk:
+        class: "ceph-rbd"
+      file:
+        class: "cephfs"
+    appInstaller: "/pool/app-installer-9.0.1202.jar"
+    # repoOverride: cr.test.lan
+    security:
+      cni:
+        defaultIngressPolicy: deny
+        defaultEgressPolicy: deny
+        createNetworkPolicy: true
+        excludeUnusedPorts: false
\ No newline at end of file
diff --git a/samples/environment/local.yaml b/samples/environment/local.yaml
new file mode 100644
index 0000000..97e3f77
--- /dev/null
+++ b/samples/environment/local.yaml
@@ -0,0 +1,12 @@
+toolbox:
+  enabled: true
+dav:
+  enabled: true
+nstoreDownloader:
+  enabled: true
+global:
+  environment:
+    ingress:
+      class: "nginx"
+      domain: "{{ .instance.group | default .Release.Name }}.dev.local"
+    appInstaller: "/pool/app-installer-9.0.1202.jar"
diff --git a/samples/environment/nodeport.yaml b/samples/environment/nodeport.yaml
new file mode 100644
index 0000000..6fdc013
--- /dev/null
+++ b/samples/environment/nodeport.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: nplus-operator-nodeport-access
+spec:
+  type: NodePort
+  selector:
+    nplus/component: operator
+  ports:
+    - port: 8080
+      targetPort: 8080
+      nodePort: 31976
diff --git a/samples/generic/README.md b/samples/generic/README.md
new file mode 100644
index 0000000..ea3e909
--- /dev/null
+++ b/samples/generic/README.md
@@ -0,0 +1,98 @@
+# Generic Mount Example
+
+This allows you to mount any pre-provisioned PVs, secret or configMap into any container.
+It can be used e.g. to mount migration nfs, cifs / samba shares into a pipeliner container.
+
+Use the following format:
+
+```
+mounts:
+  generic:
+    - name: <name>:
+      path: <the path in the container, where you want to mount this>
+      volumeName: <the name of the PV to be mounted>
+      configMap: <the name of the configMap to bemounted>
+      secret: <the name of the secret to bemounted>
+      subPath: [a (optional) subpath to be used inside the PV]
+      accessMode: <ReadWriteMany|ReadWriteOnce|ReadOnlyMany|ReadWriteOncePod>
+      size: <size request>
+```
+
+## Mounting generic secrets or configMaps
+
+In this example, we create a secret with two sample files and a configMap with two sample files:
+
+```
+apiVersion: v1
+kind: Secret
+metadata:
+  name: sample-generic-secret
+type: Opaque
+stringData:
+  test1.txt: |
+    This is a test file
+    lets see if this works.
+  test2.txt: |
+    This is a second test file
+    lets see if this works.
+---
+apiVersion: v1 
+kind: ConfigMap 
+metadata:
+  name: sample-generic-configmap
+data:
+  test1.txt: |
+    This is a test file
+    lets see if this works.
+  test2.txt: |
+    This is a second test file
+    lets see if this works.
+```
+
+Then we use these objects to mount them as directory and as files:
+
+```
+nappl:
+  mounts:
+    generic:
+      # -- This shows how to mount the contents of a secret into
+      # a directory
+      - name: "sample-generic-secret"
+        secret: "sample-generic-secret"
+        path: "/mnt/secret"
+
+      # -- This shows how to mount the contents of a configMap into
+      # a directory
+      - name: "sample-generic-configmap"
+        configMap: "sample-generic-configmap"
+        path: "/mnt/configmap"
+
+      # -- This shows how to mount a file from a secret to a secret file
+      - name: "sample-generic-secret-file"
+        secret: "sample-generic-secret"
+        path: "/mnt/secret-file.txt"
+        subPath: "test1.txt"
+
+      # -- This shows how to mount a file from a configMap to a file
+      - name: "sample-generic-configmap-file"
+        configMap: "sample-generic-configmap"
+        path: "/mnt/configmap-file.txt"
+        subPath: "test2.txt"
+```
+
+## Mounting generic PVs
+
+Here is an example how to mount any pre-created PV:
+
+```
+mounts:
+  generic:
+    # -- This shows how to mount a generic Persistent Volume
+    - name: "migration"
+      path: "/mnt/migration"
+      subPath: "{{ .Release.Name }}-mig"
+      accessModes: 
+        - ReadWriteMany
+      volumeName: my-migration-data-volume
+      size: "512Gi"
+```
\ No newline at end of file
diff --git a/samples/generic/build.sh b/samples/generic/build.sh
new file mode 100755
index 0000000..9b1013c
--- /dev/null
+++ b/samples/generic/build.sh
@@ -0,0 +1,45 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Set the Variables
+SAMPLE="generic"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/generic/values.yaml \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
diff --git a/samples/generic/content.yaml b/samples/generic/content.yaml
new file mode 100644
index 0000000..9d0f3dd
--- /dev/null
+++ b/samples/generic/content.yaml
@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: sample-generic-secret
+type: Opaque
+stringData:
+  test1.txt: |
+    This is a test file
+    lets see if this works.
+  test2.txt: |
+    This is a second test file
+    lets see if this works.
+---
+apiVersion: v1 
+kind: ConfigMap 
+metadata:
+  name: sample-generic-configmap
+data:
+  test1.txt: |
+    This is a test file
+    lets see if this works.
+  test2.txt: |
+    This is a second test file
+    lets see if this works.
diff --git a/samples/generic/values.yaml b/samples/generic/values.yaml
new file mode 100644
index 0000000..40ead4a
--- /dev/null
+++ b/samples/generic/values.yaml
@@ -0,0 +1,26 @@
+nappl:
+  mounts:
+    generic:
+      # -- This shows how to mount the contents of a secret into
+      # a directory
+      - name: "sample-generic-secret"
+        secret: "sample-generic-secret"
+        path: "/mnt/secret"
+
+      # -- This shows how to mount the contents of a configMap into
+      # a directory
+      - name: "sample-generic-configmap"
+        configMap: "sample-generic-configmap"
+        path: "/mnt/configmap"
+
+      # -- This shows how to mount a file from a secret to a secret file
+      - name: "sample-generic-secret-file"
+        secret: "sample-generic-secret"
+        path: "/mnt/secret-file.txt"
+        subPath: "test1.txt"
+
+      # -- This shows how to mount a file from a configMap to a file
+      - name: "sample-generic-configmap-file"
+        configMap: "sample-generic-configmap"
+        path: "/mnt/configmap-file.txt"
+        subPath: "test2.txt"
diff --git a/samples/group/README.md b/samples/group/README.md
new file mode 100644
index 0000000..11ab937
--- /dev/null
+++ b/samples/group/README.md
@@ -0,0 +1,56 @@
+# Grouping Instances
+
+Sometimes Instances become quite large with many components. If you work on them with multiple team members, you end up having to synchronize the deployment of the Instances.
+
+You can easily rip large Instances apart using the `group` tag, joining multiple Instances into one group and making sure the NetworkPolicies are opened to pods from other Instances within the Instance Group.
+
+```yaml
+global:
+  instance:
+    # -- despite the instance name, all components within this group will be prefixed
+    # with the group (unless the group name and the environment name are not identical)
+    # Also this makes sure the network policies are acting on the group, not on the instance.
+    group: "sample-group"
+```
+
+You can query the instance group in your code with `.instance.group`.
+
+Example: We build multiple Instances in one group:
+
+- sample-group-backend
+  - Database
+  - nstl
+  - rs
+- sample-group-middleware
+  - nappl
+  - application(s)
+- sample-group-frontend
+  - web
+  - cmis
+
+Portainer is showing the group as if it were an single instance:
+
+![Portainer](assets/portainer.png)
+
+
+
+The nplus UI is showing the instances of the group:
+
+![nplus Web Monitoring](assets/monitor.png)
+
+And the nplus CLI is also showing single instances:
+
+```
+% kubectl get nscale
+NAME                                                                 INSTANCE                         COMPONENT       TYPE            VERSION    STATUS
+component.nplus.cloud/sample-group-cmis                              sample-group-frontend            cmis            cmis            9.2.1200   healthy
+component.nplus.cloud/sample-group-database                          sample-group-backend             database        database        16         healthy
+component.nplus.cloud/sample-group-nappl                             sample-group-middleware          nappl           core            9.2.1302   healthy
+component.nplus.cloud/sample-group-rs                                sample-group-backend             rs              rs              9.2.1201   healthy
+component.nplus.cloud/sample-group-web                               sample-group-frontend            web             web             9.2.1300   healthy
+
+NAME                                                  HANDLER   VERSION    TENANT   STATUS
+instance.nplus.cloud/sample-group-backend             manual    9.2.1302            healthy
+instance.nplus.cloud/sample-group-frontend            manual    9.2.1302            healthy
+instance.nplus.cloud/sample-group-middleware          manual    9.2.1302            healthy
+```
diff --git a/samples/group/assets/monitor.png b/samples/group/assets/monitor.png
new file mode 100644
index 0000000..5a2a30c
Binary files /dev/null and b/samples/group/assets/monitor.png differ
diff --git a/samples/group/assets/portainer.png b/samples/group/assets/portainer.png
new file mode 100644
index 0000000..5b0a2d9
Binary files /dev/null and b/samples/group/assets/portainer.png differ
diff --git a/samples/group/backend.yaml b/samples/group/backend.yaml
new file mode 100644
index 0000000..090ef08
--- /dev/null
+++ b/samples/group/backend.yaml
@@ -0,0 +1,42 @@
+components:
+  nappl: false
+  nappljobs: false
+  web: false
+  mon: false
+  rs: true
+  ilm: false
+  cmis: false
+  database: true
+  nstl: true
+  nstla: false
+  nstlb: false
+  pipeliner: false
+  application: false
+  administrator: false
+  webdav: false
+  rms: false
+  pam: false
+global:
+  instance:
+    # -- despite the instance name, all components within this group will be prefixed
+    # with the group (unless the group name and the environment name are not identical)
+    # Also this makes sure the network policies are acting on the group, not on the instance.
+    group: "sample-group"
+
+# -- We need to make sure, that only ONE instance is creating the default network policies
+# and also the certificate for the group.
+# All other group members are using the central one
+override:
+  ingress:
+    # -- this overrides any issuers and makes sure not certificate request is generated for
+    # cert-manager
+    issuer: null
+    # -- since no issuer is set, the default would be to generate a self signed certificate.
+    # We need to prevent that
+    createSelfSignedCertificate: false
+  security:
+    cni:
+      # -- Even if we globally switched the creation of network policies on, we do not want that
+      # for this instance (and the instance chart only: Subcharts might still create the policies.
+      # If you want to force that off as well, override in global)
+      createNetworkPolicy: false
diff --git a/samples/group/build.sh b/samples/group/build.sh
new file mode 100755
index 0000000..62b32fe
--- /dev/null
+++ b/samples/group/build.sh
@@ -0,0 +1,56 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Set the Variables
+SAMPLE="group"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance-group
+helm template --debug \
+     --values $SAMPLES/group/backend.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME-backend $CHARTS/instance > $DEST/instance-group/$SAMPLE-backend.yaml
+
+helm template --debug \
+     --values $SAMPLES/group/middleware.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME-middleware $CHARTS/instance > $DEST/instance-group/$SAMPLE-middleware.yaml
+
+helm template --debug \
+     --values $SAMPLES/group/frontend.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME-frontend $CHARTS/instance > $DEST/instance-group/$SAMPLE-frontend.yaml
diff --git a/samples/group/frontend.yaml b/samples/group/frontend.yaml
new file mode 100644
index 0000000..d27d51e
--- /dev/null
+++ b/samples/group/frontend.yaml
@@ -0,0 +1,26 @@
+components:
+  nappl: false
+  nappljobs: false
+  web: true
+  mon: false
+  rs: false
+  ilm: false
+  cmis: true
+  database: false
+  nstl: false
+  nstla: false
+  nstlb: false
+  pipeliner: false
+  application: false
+  administrator: false
+  webdav: false
+  rms: false
+  pam: false
+global:
+  instance:
+    # -- despite the instance name, all components within this group will be prefixed
+    # with the group (unless the group name and the environment name are not identical)
+    # Also this makes sure the network policies are acting on the group, not on the instance.
+    group: "sample-group"
+
+# Notice, that we do NOT override anything here, are we use this instance as the master for the group.
\ No newline at end of file
diff --git a/samples/group/middleware.yaml b/samples/group/middleware.yaml
new file mode 100644
index 0000000..1c18a07
--- /dev/null
+++ b/samples/group/middleware.yaml
@@ -0,0 +1,47 @@
+components:
+  nappl: true
+  nappljobs: false
+  web: false
+  mon: false
+  rs: false
+  ilm: false
+  cmis: false
+  database: false
+  nstl: false
+  nstla: false
+  nstlb: false
+  pipeliner: false
+  application: true
+  administrator: false
+  webdav: false
+  rms: false
+  pam: false
+
+application:
+  docAreas:
+    - id: "Sample"
+
+global:
+  instance:
+    # -- despite the instance name, all components within this group will be prefixed
+    # with the group (unless the group name and the environment name are not identical)
+    # Also this makes sure the network policies are acting on the group, not on the instance.
+    group: "sample-group"
+
+# -- We need to make sure, that only ONE instance is creating the default network policies
+# and also the certificate for the group.
+# All other group members are using the central one
+override:
+  ingress:
+    # -- this overrides any issuers and makes sure not certificate request is generated for
+    # cert-manager
+    issuer: null
+    # -- since no issuer is set, the default would be to generate a self signed certificate.
+    # We need to prevent that
+    createSelfSignedCertificate: false
+  security:
+    cni:
+      # -- Even if we globally switched the creation of network policies on, we do not want that
+      # for this instance (and the instance chart only: Subcharts might still create the policies.
+      # If you want to force that off as well, override in global)
+      createNetworkPolicy: false
diff --git a/samples/ha/README.md b/samples/ha/README.md
new file mode 100644
index 0000000..355a872
--- /dev/null
+++ b/samples/ha/README.md
@@ -0,0 +1,78 @@
+# High Availability
+
+To gain a higher level of availability for your Instance, you can 
+
+- create more Kubernetes Cluster Nodes
+- create more replicas of the *nscale* and *nplus* components
+- distribute those replicas across multiple nodes using anti-affinities
+
+This is how:
+
+```
+helm install \
+  --values samples/ha/values.yaml
+  --values samples/environment/demo.yaml \
+  sample-ha nplus/nplus-instance
+```
+
+The essents of the values file is this:
+
+- We use three (3) *nscale Server Application Layer*, two dedicated to user access, one dedicated to jobs
+- if the jobs node fails, the user nodes take the jobs (handled by priority)
+- if one of the user nodes fail, the other one handles the load
+- Kubernetes takes care of restarting nodes should that happen
+- All components run with two replicas
+- Pod anti-affinities handle the distribution
+- any administration component only connects to the jobs nappl, leaving the user nodes to the users
+- PodDisruptionBudgets are defined for the crutial components. These are set via `minReplicaCount` for the components that can support multiple replicas, and `minReplicaCountType` for the **first** replicaSet of the components that do not support replicas, in this case nstla.
+
+```
+web:
+  replicaCount: 2
+  minReplicaCount: 1
+rs:
+  replicaCount: 2
+  minReplicaCount: 1
+ilm:
+  replicaCount: 2
+  minReplicaCount: 1
+cmis:
+  replicaCount: 2
+  minReplicaCount: 1
+webdav:
+  replicaCount: 2
+  minReplicaCount: 1
+nstla:
+  minReplicaCountType: 1
+administrator:
+  nappl:
+    host: "{{ .component.prefix }}nappljobs.{{ .Release.Namespace }}"
+  waitFor:
+    - "-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 600"
+pam:
+  nappl:
+    host: "{{ .component.prefix }}nappljobs.{{ .Release.Namespace }}"
+  waitFor:
+    - "-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 600"
+nappl:
+  replicaCount: 2
+  minReplicaCount: 1
+  jobs: false
+  waitFor:
+    - "-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 600"
+nappljobs:
+  replicaCount: 1
+  jobs: true
+  disableSessionReplication: true
+  ingress:
+    enabled: false
+  snc:
+    enabled: true
+  waitFor:
+    - "-service {{ .component.prefix }}database.{{ .Release.Namespace }}.svc.cluster.local:5432 -timeout 600"
+application:
+  nstl: 
+    host: "{{ .component.prefix }}nstl-cluster.{{ .Release.Namespace }}"
+  nappl:
+    host: "{{ .component.prefix }}nappljobs.{{ .Release.Namespace }}"
+```
diff --git a/samples/ha/build.sh b/samples/ha/build.sh
new file mode 100755
index 0000000..266ea15
--- /dev/null
+++ b/samples/ha/build.sh
@@ -0,0 +1,58 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Set the Variables
+SAMPLE="ha"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/ha/values.yaml \
+     --values $SAMPLES/hid/values.yaml \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+
+# creating the Argo manifest
+mkdir -p $DEST/instance-argo
+helm template --debug \
+     --values $SAMPLES/ha/values.yaml \
+     --values $SAMPLES/hid/values.yaml \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME-argo $CHARTS/instance-argo > $DEST/instance-argo/$SAMPLE-argo.yaml
+
+
diff --git a/samples/ha/values.yaml b/samples/ha/values.yaml
new file mode 100644
index 0000000..0c20ce5
--- /dev/null
+++ b/samples/ha/values.yaml
@@ -0,0 +1,126 @@
+components:
+  nappl: true
+  nappljobs: true
+  web: true
+  mon: true
+  rs: true
+  ilm: true
+  erpproxy: true
+  erpcmis: true
+  cmis: true
+  database: true
+  nstl: false
+  nstla: true
+  nstlb: true
+  pipeliner: false
+  application: true
+  administrator: true
+  webdav: true
+  rms: false
+  pam: true
+web:
+  replicaCount: 2
+  minReplicaCount: 1
+
+rs:
+  replicaCount: 2
+  minReplicaCount: 1
+
+ilm:
+  replicaCount: 2
+  minReplicaCount: 1
+
+erpproxy:
+  replicaCount: 2
+  minReplicaCount: 1
+
+erpcmis:
+  replicaCount: 2
+  minReplicaCount: 1
+
+cmis:
+  replicaCount: 2
+  minReplicaCount: 1
+
+webdav:
+  replicaCount: 2
+  minReplicaCount: 1
+
+administrator:
+  nappl:
+    host: "{{ .component.prefix }}nappljobs.{{ .Release.Namespace }}"
+  waitFor:
+    - "-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 600"
+
+pam:
+  nappl:
+    host: "{{ .component.prefix }}nappljobs.{{ .Release.Namespace }}"
+  waitFor:
+    - "-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 600"
+
+nappl:
+  replicaCount: 2
+  minReplicaCount: 1
+  jobs: false
+  waitFor:
+    - "-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 600"
+nappljobs:
+  replicaCount: 1
+  jobs: true
+  disableSessionReplication: true
+  ingress:
+    enabled: false
+  snc:
+    enabled: true
+  waitFor:
+    - "-service {{ .component.prefix }}database.{{ .Release.Namespace }}.svc.cluster.local:5432 -timeout 600"
+
+application:
+  nstl: 
+    host: "{{ .component.prefix }}nstl-cluster.{{ .Release.Namespace }}"
+  nappl:
+    host: "{{ .component.prefix }}nappljobs.{{ .Release.Namespace }}"
+  waitFor:
+    - "-service {{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local:{{ .this.nappl.port }} -timeout 1800"
+
+nstla:
+  minReplicaCountType: 1
+  accounting: true
+  logForwarder:
+    - name: Accounting
+      path: "/opt/ceyoniq/nscale-server/storage-layer/accounting/*.csv"
+  serverID: 4711
+  env:
+    NSTL_REMOTESERVER_MAINTAINCONNECTION: 1
+    NSTL_REMOTESERVER_SERVERID: 4712
+    NSTL_REMOTESERVER_ADDRESS: "nstlb"
+    NSTL_REMOTESERVER_NAME: "nstla"
+    NSTL_REMOTESERVER_USERNAME: "admin"
+    NSTL_REMOTESERVER_PASSWORD: "admin"
+    NSTL_REMOTESERVER_MAXCONNECTIONS: 10
+    NSTL_REMOTESERVER_MAXARCCONNECTIONS: 1
+    NSTL_REMOTESERVER_FORWARDDELETEJOBS: 0
+    NSTL_REMOTESERVER_ACCEPTRETRIEVAL: 1
+    NSTL_REMOTESERVER_ACCEPTDOCS: 1
+    NSTL_REMOTESERVER_ACCEPTDOCSWITHTHISSERVERID: 1
+    NSTL_REMOTESERVER_PERMANENTMIGRATION: 1
+nstlb:
+  accounting: true
+  logForwarder:
+    - name: Accounting
+      path: "/opt/ceyoniq/nscale-server/storage-layer/accounting/*.csv"
+  serverID: 4712
+  env:
+    NSTL_REMOTESERVER_MAINTAINCONNECTION: 1
+    NSTL_REMOTESERVER_SERVERID: 4711
+    NSTL_REMOTESERVER_ADDRESS: "nstla"
+    NSTL_REMOTESERVER_NAME: "nstla"
+    NSTL_REMOTESERVER_USERNAME: "admin"
+    NSTL_REMOTESERVER_PASSWORD: "admin"
+    NSTL_REMOTESERVER_MAXCONNECTIONS: 10
+    NSTL_REMOTESERVER_MAXARCCONNECTIONS: 1
+    NSTL_REMOTESERVER_FORWARDDELETEJOBS: 0
+    NSTL_REMOTESERVER_ACCEPTRETRIEVAL: 1
+    NSTL_REMOTESERVER_ACCEPTDOCS: 1
+    NSTL_REMOTESERVER_ACCEPTDOCSWITHTHISSERVERID: 1
+    NSTL_REMOTESERVER_PERMANENTMIGRATION: 1
diff --git a/samples/hid/README.md b/samples/hid/README.md
new file mode 100644
index 0000000..5d5aa34
--- /dev/null
+++ b/samples/hid/README.md
@@ -0,0 +1,17 @@
+## Highest ID
+
+This example shows how to configure storing the HID file in *nscale Server Storage Layer*:
+
+```yaml
+global:
+  # -- enables checking the highest DocID when starting the server.
+  # this only makes sense, if you also set a separate volume for the highest ID
+  # This is a backup / restore feature to avoid data mangling
+  checkHighestDocId: "1"
+  # -- sets the path of the highest ID file.
+  dvCheckPath: "/opt/ceyoniq/nscale-server/storage-layer/hid"
+```
+
+We use the global section here to have it activated in all nstl instances defined.
+
+This is used by the empty application sample and the ha sample.
diff --git a/samples/hid/values.yaml b/samples/hid/values.yaml
new file mode 100644
index 0000000..e0d61c3
--- /dev/null
+++ b/samples/hid/values.yaml
@@ -0,0 +1,7 @@
+global:
+  # -- enables checking the highest DocID when starting the server.
+  # this only makes sense, if you also set a separate volume for the highest ID
+  # This is a backup / restore feature to avoid data mangling
+  checkHighestDocId: "1"
+  # -- sets the path of the highest ID file.
+  dvCheckPath: "/opt/ceyoniq/nscale-server/storage-layer/hid"
diff --git a/samples/nowaves/README.md b/samples/nowaves/README.md
new file mode 100644
index 0000000..e2fb6bf
--- /dev/null
+++ b/samples/nowaves/README.md
@@ -0,0 +1,36 @@
+# Deploying with Argo
+
+## the argo version of the instance
+
+Deployin with argoCD is straight forward, as there is a ready-to-run instance chart version for argo, that takes **exactly** the same values as the *normal* chart:
+
+```bash
+helm install \
+     --values samples/application/empty.yaml \
+     --values samples/environment/demo.yaml \
+     sample-empty-argo nplus/nplus-instance-argo
+```
+
+## Using Waves
+
+The instance chart already comes with pre-defined waves. They are good to go with (can be modified though):
+
+```yaml
+nappl:
+  meta:
+    wave: 15
+```
+
+**But**: You might be annoyed by ArgoCD, when some services do not come up preventing other services to not be started at all since ArgoCD operates in Waves, so later services might not be deployed at all if an early wave services fails.
+
+Especially in DEV, this can become a testing problem. 
+
+To turn *off* Waves completely for a Stage, Environment or Instance, go
+
+```
+global:
+  environment:
+    utils:
+      disableWave: true
+```
+
diff --git a/samples/nowaves/build.sh b/samples/nowaves/build.sh
new file mode 100755
index 0000000..5fec2db
--- /dev/null
+++ b/samples/nowaves/build.sh
@@ -0,0 +1,45 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Set the Variables
+SAMPLE="nowaves"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# creating the Argo manifest
+mkdir -p $DEST/instance-argo
+helm template --debug \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/nowaves/values.yaml \
+     $NAME-argo $CHARTS/instance-argo > $DEST/instance-argo/$SAMPLE-argo.yaml
diff --git a/samples/nowaves/values.yaml b/samples/nowaves/values.yaml
new file mode 100644
index 0000000..2c6fcd9
--- /dev/null
+++ b/samples/nowaves/values.yaml
@@ -0,0 +1,4 @@
+global:
+  environment:
+    utils:
+      disableWave: true
diff --git a/samples/opentelemetry/README.md b/samples/opentelemetry/README.md
new file mode 100644
index 0000000..30b0f46
--- /dev/null
+++ b/samples/opentelemetry/README.md
@@ -0,0 +1,33 @@
+# OpenTelemetry
+
+You can use Annotations für Telemetry Operators such as Open Telemetry to inject their Agents into the Pods.
+To do so, you can either add the annotations manually to the components, like this:
+
+```
+nappl:
+  template:
+    annotations:
+      instrumentation.opentelemetry.io/inject-java: "true"
+      instrumentation.opentelemetry.io/java-container-names: "application-layer"
+```
+
+or alternatively, you can turn on the built in functionality for the supported telemetry services.
+
+This is an example for OpenTelemetry:
+
+```
+global:
+  telemetry:
+    openTelemetry: true
+    serviceName: "{{ .this.meta.type }}-{{ .instance.name }}-{{ .instance.stage }}"
+  meta:
+    stage: "dev"
+```
+
+This will automatically set the correct settings as seen above.
+
+
+Please also see here:
+
+- https://opentelemetry.io/docs/kubernetes/operator/automatic/
+- https://github.com/open-telemetry/opentelemetry-operator#opentelemetry-auto-instrumentation-injection
diff --git a/samples/pinning/README.md b/samples/pinning/README.md
new file mode 100644
index 0000000..c60a475
--- /dev/null
+++ b/samples/pinning/README.md
@@ -0,0 +1,47 @@
+
+# Pinning Versions
+
+## Old Version
+
+If you like to test rolling updates and the updates to new minor versions, check out the *e90* sample:
+
+This sample will install a version 9.0.1400 for you to test. Since the Cluster Node Discovery changed due to a new jGroups version in nscale, the chart will notice the old version and turn on the legacy discovery mechanism to allow the Pod to find its peers in Versions prior to 9.1.1200.
+
+```
+helm install \
+    --values samples/empty.yaml \
+    --values samples/demo.yaml \
+    --values versions/9.0.1400.yaml \
+    sample-e90 nplus/nplus-instance
+```
+
+## New Version Sample
+
+Some nscale Versions are License-Compatible, meaning that for example a Version 9.1 License File will also be able to run a nscale Version 9.0 Software. But that is not always the case.
+
+So you might need to set individual licenses per instance:
+
+```
+kubectl create secret generic nscale-license-e10 \
+  --from-file=license.xml=license10.xml
+```
+
+Check, if the license has been created:
+
+```
+# kubectl get secret | grep license
+nscale-license          Opaque              1      7d22h
+nscale-license-e10      Opaque              1      17s
+```
+
+Now, we install the instance:
+
+```
+helm upgrade -i \
+    --values samples/empty.yaml \
+    --values samples/demo.yaml \
+    --values versions/10.0.yaml \
+    --set global.license=nscale-license-e10 \
+    sample-e10 nplus/nplus-instance
+```
+
diff --git a/samples/pinning/build.sh b/samples/pinning/build.sh
new file mode 100755
index 0000000..c6e5ba2
--- /dev/null
+++ b/samples/pinning/build.sh
@@ -0,0 +1,93 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+#
+# VERSION 9.0
+#
+
+# Set the Variables
+SAMPLE="nscale-90"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     --values $WORKSPACE/versions/9.0.1400.yaml \
+     --set global.license=nscale-license-e92 \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+
+# creating the Argo manifest
+mkdir -p $DEST/instance-argo
+helm template --debug \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     --values $WORKSPACE/versions/9.0.1400.yaml \
+     --set global.license=nscale-license-e92 \
+     $NAME-argo $CHARTS/instance-argo > $DEST/instance-argo/$SAMPLE-argo.yaml
+
+
+#
+# VERSION 9.1
+#
+
+# Set the Variables
+SAMPLE="nscale-91"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     --values $WORKSPACE/versions/9.1.1506.yaml \
+     --set global.license=nscale-license-e92 \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+
+# creating the Argo manifest
+mkdir -p $DEST/instance-argo
+helm template --debug \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     --values $WORKSPACE/versions/9.1.1506.yaml \
+     --set global.license=nscale-license-e92 \
+     $NAME-argo $CHARTS/instance-argo > $DEST/instance-argo/$SAMPLE-argo.yaml
+
diff --git a/samples/resources/README.md b/samples/resources/README.md
new file mode 100644
index 0000000..dbf4f10
--- /dev/null
+++ b/samples/resources/README.md
@@ -0,0 +1,192 @@
+## Assigning CPU and RAM
+
+You **should** assign resources to your components, depending on the load that you expect.
+
+In a dev environment, that might be very little and you may be fine with the defaults.
+
+in a qa or prod environment, this should be wisely controlled, like this:
+
+```yaml
+nappl:
+  resources:
+    requests:
+      cpu: "100m"         # Minimum 1/10 CPU
+      memory: "1024Mi"    # Minimum 1 GB
+    limits:
+      cpu: "2000m"        # Maximum 2 Cores
+      memory: "4096Mi"    # Maximum 4 GB. Java will see this as total.
+  javaOpts:
+    javaMinMem: "512m"    # tell Java to initialize the heap with 512 MB
+    javaMaxMem: "2048m"   # tell Java to use max 2 GB of heap size
+```
+
+There are many discussions going on how much memory you should give to Java processes and how they react. Please see the internet for insight.
+
+#### Our **current** opinion is:
+
+Do not limit ram. You are not able to foresee how much Java is really consuming as the heap is only part of the RAM requirement. Java also needs *metaspace*, *code cache* and *thread stack*. Also the *GC* needs some memory, as well as the *symbols*.
+
+Java will crash when out of memory, so even if you set javaMaxMem == 1/2 limits.memory (what many do), that guarantees nothing and might be a lot of waste.
+
+So what you can consider is:
+
+```yaml
+nappl:
+  resources:
+    requests:
+      cpu: "1000m"        # 1 Core guaranteed
+      memory: "4096Mi"    # 4GB guaranteed
+    limits:
+      cpu: "4000m"        # Maximum 4 Cores
+#     memory:             # No Limit but hardware
+  javaOpts:
+    javaMinMem: "1024m"   # Start with 1 GB
+    javaMaxMem: "3072m"   # Go up to 3GB (which is only part of it) but be able to take more (up to limit) without crash
+```
+
+Downside of this approach: If you have a memory leak, it might consume all of your nodes memory without being stopped by a hard limit.
+
+
+#### A possible **Alternative**:
+
+You can set the RAM limit equal to the RAM request and leave the java Memory settings to *automatic*, which basically simulates a server. Java will *see* the limit as being the size of RAM installed in the machine and act accordingly.
+
+```yaml
+nappl:
+  resources:
+    requests:
+      cpu: "1000m"        # 1 Core guaranteed
+      memory: "4096Mi"    # 4GB guaranteed
+    limits:
+      cpu: "4000m"        # Maximum 4 Cores
+      memory: "4096Mi"    # No Limit but hardware
+# javaOpts:
+#   javaMinMem:           # unset, leaving it to java
+#   javaMaxMem:           # unset, leaving it to java
+```
+
+
+
+#### In a **DEV** environment,
+
+you might want to do more **overprovisioning**. You could even leave it completely unlimited, as in **DEV** you want to see memory and cpu leaks, so a limit might hide them from your sight.
+
+So this is a possible allocation for **DEV**, defining only the bare minimum requests:
+
+```yaml
+nappl:
+  resources:
+    requests:
+      cpu: "1m"           # 1/1000 Core guaranteed, 
+                          # but can consume all cores of the cluster node if required and available
+      memory: "512Mi"     # 512MB guaranteed, 
+                          # but can consume all RAM of the cluster node if required and available
+```
+
+In this case, Java will see all node RAM as the limit and use whatever it needs. But as you are in a **dev** environment, there is no load and no users on the machine, so this will not require much.
+
+
+
+## Resources you should calculate
+
+The default resources assigned by *nplus* are for demo / testing only and you should definitely assign more ressources to your components.
+Here is a very rough estimate of what you need:
+
+| Component       | Minimum (Demo and Dev) | Small            | Medium            | Large              | XL   | Remark                                                      |
+| --------------- | ---------------------- | ---------------- | ----------------- | ------------------ | ---- | ----------------------------------------------------------- |
+| ADMIN           | 1 GB RAM, 1 Core       | 2 GB RAM, 1 Core | 2 GB RAM, 1 Core  | 2 GB RAM, 1 Core   |      |                                                             |
+| **Application** | -                      | -                | -                 | -                  |      | Resources required during deployment only                   |
+| CMIS            | 1 GB RAM, 1 Core       | 2 GB RAM, 2 Core | 2 GB RAM, 2 Core  | 2 GB RAM, 2 Core   |      |                                                             |
+| **Database**    | 2 GB RAM, 2 Core       | 4 GB RAM, 4 Core | 8 GB RAM, 6 Core  | 16 GB RAM, 8 Core  | open |                                                             |
+| ILM             | 1 GB RAM, 1 Core       | 2 GB RAM, 2 Core | 2 GB RAM, 2 Core  | 2 GB RAM, 2 Core   |      |                                                             |
+| MON             | 1 GB RAM, 1 Core       | 2 GB RAM, 2 Core | 2 GB RAM, 2 Core  | 2 GB RAM, 2 Core   |      | quite fix                                                   |
+| **NAPPL**       | 2 GB RAM, 2 Core       | 4 GB RAM, 4 Core | 8 GB RAM, 6 Core  | 16 GB RAM, 8 Core  | open | CPU depending on Jobs / Hooks, RAM depending on amount user |
+| **NSTL**        | 500 MB RAM, 1 Core     | 1 GB RAM, 2 Core | 1 GB RAM, 2 Core  | 1 GB RAM, 2 Core   |      | quite fix                                                   |
+| PAM             |                        | 2 GB RAM, 1 Core | 2 GB RAM, 1 Core  | 2 GB RAM, 1 Core   |      |                                                             |
+| PIPELINER       | 2 GB RAM, 2 Core       | 4 GB RAM, 4 Core | 4 GB RAM, 4 Core  | 4 GB RAM, 4 Core   | open | Depending on Core Mode *or* AC Mode, No Session Replication |
+| **RS**          | 1 GB RAM, 1 Core       | 8 GB RAM, 4 Core | 32 GB RAM, 8 Core | 64 GB RAM, 12 Core | open | CPU depending on format type, RAM depending on file size    |
+| SHAREPOINT      |                        | 2 GB RAM, 2 Core | 2 GB RAM, 2 Core  | 2 GB RAM, 2 Core   |      |                                                             |
+| WEB             | 1 GB RAM, 1 Core       | 2 GB RAM, 2 Core | 4 GB RAM, 4 Core  | 8 GB RAM, 4 Core   | open |                                                             |
+| WEBDAV          |                        | 2 GB RAM, 2 Core | 2 GB RAM, 2 Core  | 2 GB RAM, 2 Core   |      |                                                             |
+
+
+
+**Bold** components are required by a *SBS* setup, so here are some estimates per Application:
+
+| Component | Minimum (Demo and Dev) | Minimum (PROD)    | Recommended (PROD) | Remark             |
+| --------- | ---------------------- | ----------------- | ------------------ | ------------------ |
+| SBS       | 6 GB RAM, 4 Core       | 16 GB RAM, 8 Core | 24 GB RAM, 12 Core | Without WEB Client |
+| eGOV      | TODO                   | TODO              | TODO               | eGOV needs much more CPU than a non eGOV system |
+
+A word on **eGOV**: The eGOV App brings hooks and jobs, that require much more resources than a *normal* nscale system even with other Apps installed.
+
+
+## Real Resources in DEV Idle
+
+```
+% kubectl top pods
+...
+sample-ha-administrator-0                                2m           480Mi           
+sample-ha-argo-administrator-0                           2m           456Mi           
+sample-ha-argo-cmis-5ff7d78c47-kgxsn                     2m           385Mi           
+sample-ha-argo-cmis-5ff7d78c47-whx9j                     2m           379Mi           
+sample-ha-argo-database-0                                2m           112Mi           
+sample-ha-argo-ilm-58c65bbd64-pxgdl                      2m           178Mi           
+sample-ha-argo-ilm-58c65bbd64-tpxfz                      2m           168Mi           
+sample-ha-argo-mon-0                                     2m           308Mi           
+sample-ha-argo-nappl-0                                   5m           1454Mi          
+sample-ha-argo-nappl-1                                   3m           1452Mi          
+sample-ha-argo-nappljobs-0                               5m           2275Mi          
+sample-ha-argo-nstla-0                                   4m           25Mi            
+sample-ha-argo-nstlb-0                                   6m           25Mi            
+sample-ha-argo-pam-0                                     5m           458Mi           
+sample-ha-argo-rs-7d6888d9f8-lp65s                       2m           1008Mi          
+sample-ha-argo-rs-7d6888d9f8-tjxh8                       2m           1135Mi          
+sample-ha-argo-web-f646f75b8-htn8x                       4m           1224Mi          
+sample-ha-argo-web-f646f75b8-nvvjf                       11m          1239Mi          
+sample-ha-argo-webdav-d69549bd4-nz4wn                    2m           354Mi           
+sample-ha-argo-webdav-d69549bd4-vrg2n                    3m           364Mi           
+sample-ha-cmis-5fc96b8f89-cwd62                          2m           408Mi           
+sample-ha-cmis-5fc96b8f89-q4nr4                          3m           442Mi           
+sample-ha-database-0                                     2m           106Mi           
+sample-ha-ilm-6b599bc694-5ht57                           2m           174Mi           
+sample-ha-ilm-6b599bc694-ljkl4                           2m           193Mi           
+sample-ha-mon-0                                          3m           355Mi           
+sample-ha-nappl-0                                        3m           1278Mi          
+sample-ha-nappl-1                                        4m           1295Mi          
+sample-ha-nappljobs-0                                    6m           1765Mi          
+sample-ha-nstla-0                                        4m           25Mi            
+sample-ha-nstlb-0                                        4m           25Mi            
+sample-ha-pam-0                                          2m           510Mi           
+sample-ha-rs-7b5fc586f6-49qhp                            2m           951Mi           
+sample-ha-rs-7b5fc586f6-nkjqb                            2m           1205Mi          
+sample-ha-web-7bd6ffc96b-pwvcv                           3m           725Mi           
+sample-ha-web-7bd6ffc96b-rktrh                           9m           776Mi           
+sample-ha-webdav-9df789f8-2d2wn                          2m           365Mi           
+sample-ha-webdav-9df789f8-psh5q                          2m           345Mi           
+...
+```
+
+
+## Defaults
+
+Check the file `default.yaml`. You can set default memory limits for a container. These defaults are applied if you do not specify any resources in your manifest.
+
+
+## Setting Resources for sidecar containers and init containers
+
+You can also set resources for sidecar containers and init containers. However, you should only set these if you know exactly what you are doing and what implications they have.
+
+```yaml
+nstl:
+  sidecarResources:
+    requests:
+      cpu: "100m"        # 0.1 Core guaranteed
+      memory: "1024Mi"   # 1GB guaranteed
+    limits:
+      memory: "2048Mi"   # Limit to 2 GB
+      # we do NOT limit the CPU (read [here](https://home.robusta.dev/blog/stop-using-cpu-limits) for details)
+```
+
+Init Resources can be set by using `initResources` key.
+
diff --git a/samples/resources/default.yaml b/samples/resources/default.yaml
new file mode 100644
index 0000000..4726c13
--- /dev/null
+++ b/samples/resources/default.yaml
@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: LimitRange
+metadata:
+  name: defaults-resources
+spec:
+  limits:
+  - default: # limits
+      memory: "2Gi"
+      cpu: "4"
+    defaultRequest: # requests
+      memory: 512Mi
+      cpu: "5m"
+    max: # max and min define the limit range
+      cpu: "4000m"
+      memory: "4Gi"
+    min:
+      cpu: "1m"
+      memory: "128Mi"
+    type: Container
diff --git a/samples/resources/lab.yaml b/samples/resources/lab.yaml
new file mode 100644
index 0000000..afc3e4b
--- /dev/null
+++ b/samples/resources/lab.yaml
@@ -0,0 +1,225 @@
+web:
+  resources:
+    requests:
+      cpu: "10m"
+      memory: "1.5Gi"
+    limits:
+      cpu: "4000m"
+      memory: "4Gi"
+prepper:
+  resources:
+    requests:
+      cpu: "10m"
+      memory: "128Mi"
+    limits:
+      cpu: "1000m"
+      memory: "128Mi"
+application:
+  resources:
+    requests:
+      cpu: "10m"
+      memory: "512Mi"
+    limits:
+      cpu: "4000m"
+      memory: "2Gi"
+nappl:
+  resources:
+    requests:
+      cpu: "10m"
+      memory: "1.5Gi"
+    limits:
+      cpu: "4000m"
+      memory: "4Gi"
+nappljobs:
+  resources:
+    requests:
+      cpu: "10m"
+      memory: "2Gi"
+    limits:
+      cpu: "4000m"
+      memory: "4Gi"
+administrator:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "512Mi"
+    limits:
+      cpu: "2000m"
+      memory: "2Gi"
+cmis:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "512Mi"
+    limits:
+      cpu: "2000m"
+      memory: "2Gi"
+erpcmis:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "512Mi"
+    limits:
+      cpu: "2000m"
+      memory: "2Gi"
+erpproxy:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "512Mi"
+    limits:
+      cpu: "2000m"
+      memory: "2Gi"
+database:
+  resources:
+    requests:
+      cpu: "10m"
+      memory: "256Mi"
+    limits:
+      cpu: "4000m"
+      memory: "8Gi"
+ilm:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "256Mi"
+    limits:
+      cpu: "2000m"
+      memory: "2Gi"
+mon:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "512Mi"
+    limits:
+      cpu: "2000m"
+      memory: "2Gi"
+nstl:
+  resources:
+    requests:
+      cpu: "5m"
+      memory: "128Mi"
+    limits:
+      cpu: "2000m"
+      memory: "1Gi"
+nstla:
+  resources:
+    requests:
+      cpu: "5m"
+      memory: "128Mi"
+    limits:
+      cpu: "2000m"
+      memory: "1Gi"
+nstlb:
+  resources:
+    requests:
+      cpu: "5m"
+      memory: "128Mi"
+    limits:
+      cpu: "2000m"
+      memory: "1Gi"
+nstlc:
+  resources:
+    requests:
+      cpu: "5m"
+      memory: "128Mi"
+    limits:
+      cpu: "2000m"
+      memory: "1Gi"
+nstld:
+  resources:
+    requests:
+      cpu: "5m"
+      memory: "128Mi"
+    limits:
+      cpu: "2000m"
+      memory: "1Gi"
+pam:
+  resources:
+    requests:
+      cpu: "5m"
+      memory: "512Mi"
+    limits:
+      cpu: "2000m"
+      memory: "1Gi"
+rs:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "1Gi"
+    limits:
+      cpu: "4000m"
+      memory: "8Gi"
+webdav:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "512Mi"
+    limits:
+      cpu: "2000m"
+      memory: "2Gi"
+
+rms:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "128Mi"
+    limits:
+      cpu: "1000m"
+      memory: "512Mi"
+rmsa:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "128Mi"
+    limits:
+      cpu: "1000m"
+      memory: "512Mi"
+rmsb:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "128Mi"
+    limits:
+      cpu: "1000m"
+      memory: "512Mi"
+sharepoint:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "512Mi"
+    limits:
+      cpu: "2000m"
+      memory: "2Gi"
+sharepointa:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "512Mi"
+    limits:
+      cpu: "2000m"
+      memory: "2Gi"
+sharepointb:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "512Mi"
+    limits:
+      cpu: "2000m"
+      memory: "2Gi"
+sharepointc:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "512Mi"
+    limits:
+      cpu: "2000m"
+      memory: "2Gi"
+sharepointd:
+  resources:
+    requests:
+      cpu: "2m"
+      memory: "512Mi"
+    limits:
+      cpu: "2000m"
+      memory: "2Gi"
diff --git a/samples/rms/README.md b/samples/rms/README.md
new file mode 100644
index 0000000..9f20d69
--- /dev/null
+++ b/samples/rms/README.md
@@ -0,0 +1,59 @@
+# (virtual-) Remote Management Server
+
+The *nplus RMS* creates a virtual IP Address in your subnet. On this IP, you will find an *nscale Remote Management Service* and a Layer 4 Proxy, forwarding the ports of the components to the
+belonging pods.
+
+The result is, that under this VIP, it looks as if there is a real server with a bunch of *nscale* components installed. So you can use the desktop admin client to connect to it and configure it. Including offline configuration.
+
+The offline configuration writes settings to the configuration files of the components. These files are injected into the Pods by *nplus* making the legacy magic work again.
+
+Also, Shotdown, Startup and Restart buttons in the Admin client will work, as that will by translated to Kubernetes commands by *nplus*
+
+Anyways, there are some restrictions:
+
+- In a HA scenario, you need multiple virtual server, as nscale does not allow some components to deploy more than one instance per server (like nstl) and they would then also block the default ports. So better to have more RMS
+- Log Files are not written, so the Admin cannot grab them. So no log file viewing in Admin
+
+> Please notice that this is a BETA Feature not released for Production use.
+
+This is a sample of RMS in a HA environment with two virtual servers:
+
+```yaml
+components:
+  rmsa: true
+  rmsb: true
+
+rmsa:
+  ingress:
+    domain: "server1.{{ .instance.group | default .Release.Name }}.lab.nplus.cloud"
+  comps:
+    nappl: 
+      enabled: true
+      restartReplicas: 2
+    nstl:
+      enabled: true
+      name: nstla
+      restartReplicas: 1
+      host: "{{ .component.prefix }}nstla.{{ .Release.Namespace }}.svc.cluster.local"
+    rs: 
+      enabled: true
+      restartReplicas: 2
+    web: 
+      enabled: true
+      restartReplicas: 2
+rmsb:
+  ingress:
+    domain: "server2.{{ .instance.group | default .Release.Name }}.lab.nplus.cloud"
+  comps:
+    nappl: 
+      enabled: true
+      name: nappljobs
+      restartReplicas: 1
+      replicaSetType: StatefulSet
+      host: "{{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local"
+    nstl: 
+      name: nstlb
+      enabled: true
+      restartReplicas: 1
+      host: "{{ .component.prefix }}nstlb.{{ .Release.Namespace }}.svc.cluster.local"
+```
diff --git a/samples/rms/build.sh b/samples/rms/build.sh
new file mode 100755
index 0000000..b030c99
--- /dev/null
+++ b/samples/rms/build.sh
@@ -0,0 +1,66 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Set the Variables
+SAMPLE="administrator-server"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/rms/server.yaml \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+
+
+
+
+# Set the Variables
+SAMPLE="administrator-server-ha"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/ha/values.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/rms/server-ha.yaml \
+     --values $SAMPLES/application/empty.yaml \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+
diff --git a/samples/rms/server-ha.yaml b/samples/rms/server-ha.yaml
new file mode 100644
index 0000000..6c1ebea
--- /dev/null
+++ b/samples/rms/server-ha.yaml
@@ -0,0 +1,39 @@
+components:
+  rmsa: true
+  rmsb: true
+
+# hier könnte man eine IP setzen, oder nimmt eine aus dem Pool.
+# Wenn man eine IP setzt, muss sie aus einem Pool kommen.
+rmsa:
+  ingress:
+    domain: "server1.{{ .instance.group | default .Release.Name }}.lab.nplus.cloud"
+  comps:
+    nappl: 
+      enabled: true
+      restartReplicas: 2
+    nstl:
+      enabled: true
+      name: nstla
+      restartReplicas: 1
+      host: "{{ .component.prefix }}nstla.{{ .Release.Namespace }}.svc.cluster.local"
+    rs: 
+      enabled: true
+      restartReplicas: 2
+    web: 
+      enabled: true
+      restartReplicas: 2
+rmsb:
+  ingress:
+    domain: "server2.{{ .instance.group | default .Release.Name }}.lab.nplus.cloud"
+  comps:
+    nappl: 
+      enabled: true
+      name: nappljobs
+      restartReplicas: 1
+      replicaSetType: StatefulSet
+      host: "{{ .component.prefix }}nappljobs.{{ .Release.Namespace }}.svc.cluster.local"
+    nstl: 
+      name: nstlb
+      enabled: true
+      restartReplicas: 1
+      host: "{{ .component.prefix }}nstlb.{{ .Release.Namespace }}.svc.cluster.local"
diff --git a/samples/rms/server.yaml b/samples/rms/server.yaml
new file mode 100644
index 0000000..d6c4246
--- /dev/null
+++ b/samples/rms/server.yaml
@@ -0,0 +1,19 @@
+components:
+  # -- Enable the nplus Remote Management Server / rms
+  rms: true
+rms:
+  ingress:
+    domain: "admin.{{ .instance.group | default .Release.Name }}.lab.nplus.cloud"
+  # -- This sets the external IP. Has has to come from the Layer 3 Load Balancer Pool, otherwise your
+  # L3 Load Balancer will not be able to assign it.
+  # If you leavet this empty, a VIP will be assigned from the pool
+  externalIp: 10.17.1.49
+  comps:
+    nappl: 
+      enabled: true
+    nstl: 
+      enabled: true
+    rs: 
+      enabled: true
+    web: 
+      enabled: true
diff --git a/samples/security/README.md b/samples/security/README.md
new file mode 100644
index 0000000..2c1733f
--- /dev/null
+++ b/samples/security/README.md
@@ -0,0 +1,67 @@
+# Security
+
+## All the standards
+
+There are several features that will enhance the security of your system:
+
+- all components are running rootless by default
+- all components drop all privileges
+- all components deny escalation
+- all components have read only file systems
+- Access is restricted by NetworkPolicies
+
+## Additional: The backend Protocol
+
+Additionally, you can increase security by encrypting communication in the backend. Depending on your network driver, this might already been done automatically beween the Kubernetes Nodes. But you can double that even within a single node by switching the backend Protocol to https:
+
+
+```yaml
+global:
+  nappl:
+    port: 8443
+    ssl: true
+
+# Web and PAM do not speak https by default yet, CRs have been filed.
+
+nappl:
+  ingress:
+    backendProtocol: https
+cmis:
+  ingress:
+    backendProtocol: https
+ilm:
+  ingress:
+    backendProtocol: https
+webdav:
+  ingress:
+    backendProtocol: https
+rs:
+  ingress:
+    backendProtocol: https
+mon:
+  ingress:
+    backendProtocol: https
+administrator:
+  ingress:
+    backendProtocol: https
+```
+
+This will turn every communication to https, **but** leave the unencrypted ports (http) **open** for inter-pod communication.
+
+
+## Zero Trust Mode
+
+This will basically do the same as above, **but** also turn **off** any unencrypted port (like http) and also implement NetworkPolicies to drop unencrypted packages.
+
+This will also affect the way how *probes* are checking the pods health: *nplus* will switch them to use https instead, so even the very internal Healtch Check infrastructure will be encrypted in *zero trust mode*:
+
+```yaml
+components:
+  pam: false  #TODO: ITSMSD-8771: PAM does not yet support https backend.
+global:
+  security:
+    zeroTrust: true
+  nappl:
+    port: 8443
+    ssl: true
+```
diff --git a/samples/security/build.sh b/samples/security/build.sh
new file mode 100755
index 0000000..b4d8d3b
--- /dev/null
+++ b/samples/security/build.sh
@@ -0,0 +1,85 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Set the Variables
+SAMPLE="encrypt"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/security/encrypt.yaml \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+
+# creating the Argo manifest
+mkdir -p $DEST/instance-argo
+helm template --debug \
+     --values $SAMPLES/security/encrypt.yaml \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME-argo $CHARTS/instance-argo > $DEST/instance-argo/$SAMPLE-argo.yaml
+
+
+
+
+# Set the Variables
+SAMPLE="zerotrust"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/ha/values.yaml \
+     --values $SAMPLES/security/zerotrust.yaml \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+
+# creating the Argo manifest
+mkdir -p $DEST/instance-argo
+helm template --debug \
+     --values $SAMPLES/ha/values.yaml \
+     --values $SAMPLES/security/zerotrust.yaml \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME-argo $CHARTS/instance-argo > $DEST/instance-argo/$SAMPLE-argo.yaml
+
diff --git a/samples/security/encrypt.yaml b/samples/security/encrypt.yaml
new file mode 100644
index 0000000..a399e96
--- /dev/null
+++ b/samples/security/encrypt.yaml
@@ -0,0 +1,28 @@
+global:
+  nappl:
+    port: 8443
+    ssl: true
+
+# Web and PAM do not speak https by default yet, CRs have been filed.
+
+nappl:
+  ingress:
+    backendProtocol: https
+cmis:
+  ingress:
+    backendProtocol: https
+ilm:
+  ingress:
+    backendProtocol: https
+webdav:
+  ingress:
+    backendProtocol: https
+rs:
+  ingress:
+    backendProtocol: https
+mon:
+  ingress:
+    backendProtocol: https
+administrator:
+  ingress:
+    backendProtocol: https
diff --git a/samples/security/zerotrust.yaml b/samples/security/zerotrust.yaml
new file mode 100644
index 0000000..46f8324
--- /dev/null
+++ b/samples/security/zerotrust.yaml
@@ -0,0 +1,8 @@
+components:
+  pam: false  # #TODO: ITSMSD-8771: PAM does not yet support https backend.
+global:
+  security:
+    zeroTrust: true
+  nappl:
+    port: 8443
+    ssl: true
diff --git a/samples/shared/README.md b/samples/shared/README.md
new file mode 100644
index 0000000..d9b6eac
--- /dev/null
+++ b/samples/shared/README.md
@@ -0,0 +1,34 @@
+# Sharing Instances
+
+Some organisations have multiple tenants that share common services, like *nscale Rendition Server* or
+have a common IT department, thus using only a single *nscale Monitoring Console* acress all tenants.
+
+This is the Central Services Part:
+```
+helm install \
+  --values samples/shared/centralservices.yaml \
+  --values samples/environment/demo.yaml \
+  sample-shared-cs nplus/nplus-instance
+```
+
+And this is the tenant using the Central Services:
+```
+helm install \
+  --values samples/shared/shared.yaml \
+  --values samples/environment/demo.yaml \
+  sample-shared nplus/nplus-instance
+```
+
+If you enable security based on *Network Policies*, you need to add additional Policies to allow access. Please see `shared-networkpolicy.yaml` and `centralservices-networkpolicy.yaml` as an example.
+
+You also want to set the *monitoringInstance* in the `global` section of the values file to enable the Network Policy for incoming monitoring traffic.
+
+```yaml
+global:
+  security:
+    cni:
+      monitoringInstance: sample-shared-cs
+```
+
+
+
diff --git a/samples/shared/build.sh b/samples/shared/build.sh
new file mode 100755
index 0000000..adcc002
--- /dev/null
+++ b/samples/shared/build.sh
@@ -0,0 +1,71 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Set the Variables
+SAMPLE="shared"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/shared/shared.yaml \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+
+# Adding the extra network policy
+echo -e "\n---\n" >> $DEST/instance/$SAMPLE.yaml
+cat $SAMPLES/shared/shared-networkpolicy.yaml >> $DEST/instance/$SAMPLE.yaml
+
+
+
+# Set the Variables
+SAMPLE="shared-cs"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/shared/centralservices.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+
+# Adding the extra network policy
+echo -e "\n---\n" >> $DEST/instance/$SAMPLE.yaml
+cat $SAMPLES/shared/centralservices-networkpolicy.yaml >> $DEST/instance/$SAMPLE.yaml
+
diff --git a/samples/shared/centralservices-networkpolicy.yaml b/samples/shared/centralservices-networkpolicy.yaml
new file mode 100644
index 0000000..a756155
--- /dev/null
+++ b/samples/shared/centralservices-networkpolicy.yaml
@@ -0,0 +1,53 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: sample-shared-cs-interinstance-core
+  labels:
+    nplus/instance: sample-shared-cs
+spec:
+  podSelector:
+    matchLabels:
+      nplus/instance: sample-shared-cs
+      nplus/type: nstl
+  policyTypes:
+  - Ingress
+  ingress:
+  #
+  # allow access from alien CORE components to a central nscale Storage Layer
+  #
+  - from:
+    - podSelector:
+        matchLabels:
+          nplus/instance: sample-shared
+          nplus/type: core
+    ports:
+      - protocol: TCP
+        port: 3005
+---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: sample-shared-cs-interinstance-mon
+  labels:
+    nplus/instance: sample-shared-cs
+spec:
+  podSelector:
+    matchLabels:
+      nplus/instance: sample-shared-cs
+      nplus/type: mon
+  policyTypes:
+  - Egress
+  egress:
+  #
+  # allow monitoring console to monitor alien components.
+  # you will have to set the alien monitoring in the target namespace / instance.
+  # .Values.security.cni.monitoringNamespace .Values.security.cni.monitoringInstance
+  #
+  - to:
+    - podSelector:
+        matchLabels:
+          nplus/instance: sample-shared
+          nplus/type: core
+    ports:
+      - protocol: TCP
+        port: 3005
diff --git a/samples/shared/centralservices.yaml b/samples/shared/centralservices.yaml
new file mode 100644
index 0000000..3184a63
--- /dev/null
+++ b/samples/shared/centralservices.yaml
@@ -0,0 +1,14 @@
+components:
+  application: false
+  nappl: false
+  nappljobs: false
+  rs: true
+  mon: true
+  cmis: false
+  ilm: false
+  database: false
+  web: false
+  nstl: true
+  pipeliner: false
+  administrator: false
+  webdav: false
\ No newline at end of file
diff --git a/samples/shared/shared-networkpolicy.yaml b/samples/shared/shared-networkpolicy.yaml
new file mode 100644
index 0000000..89481bf
--- /dev/null
+++ b/samples/shared/shared-networkpolicy.yaml
@@ -0,0 +1,38 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: sample-shared-interinstance
+  labels:
+    nplus/instance: sample-shared
+spec:
+  podSelector:
+    matchLabels:
+      nplus/instance: sample-shared
+      nplus/type: core
+  policyTypes:
+  - Egress
+  egress:
+  #
+  # allow access from CORE components to a central nscale Storage Layer
+  #
+  - to:
+    - podSelector:
+        matchLabels:
+          nplus/instance: sample-shared-cs
+          nplus/type: nstl
+    ports:
+      - protocol: TCP
+        port: 3005
+  #
+  # allow access from CORE components to a central nscale Rendition Server
+  #
+  - to:
+    - podSelector:
+        matchLabels:
+          nplus/instance: sample-shared-cs
+          nplus/type: rs
+    ports:
+      - protocol: TCP
+        port: 8192
+      - protocol: TCP
+        port: 8193
\ No newline at end of file
diff --git a/samples/shared/shared.yaml b/samples/shared/shared.yaml
new file mode 100644
index 0000000..56508a4
--- /dev/null
+++ b/samples/shared/shared.yaml
@@ -0,0 +1,19 @@
+components:
+  application: true
+  rs: false
+  mon: false
+  nstl: false
+
+application:
+  enabled: true
+  docAreas:
+    - id: "DA"
+  nstl:
+    host: "sample-shared-cs-nstl.{{ .Release.Namespace }}"
+  rs:
+    host: "sample-shared-cs-rs.{{ .Release.Namespace }}"
+
+global:
+  security:
+    cni:
+      monitoringInstance: sample-shared-cs
diff --git a/samples/sharepoint/README.md b/samples/sharepoint/README.md
new file mode 100644
index 0000000..5b5445f
--- /dev/null
+++ b/samples/sharepoint/README.md
@@ -0,0 +1,106 @@
+# Specifics of the Sharepoint Connector
+
+Normally, you will have different configurations if you want multiple Sharepoint Connectors. This makes the *nsp* somewhat special:
+
+## Multi Instance HA Sharepoint Connector
+
+This sample shows how to setup a sharepoint connector with multiple instances having **different** configurations for archival, but with **High Availability** on the retrieval side.
+
+SharePoint is one of the few components for which is is quite common to have multiple instances instead of replicas. Replicas would include, that the configuration for all pods is identical. However, you might want to have multiple configurations as you also have multiple sharepoint sites you want to archive.
+
+Running multiple instances with ingress enabled leads to the question, what the context path is for each instance. It cannot be the same as the load balancer would not be able to distinguish between them and thus refuses to add the configuration object - leading in a deadlock situation.
+
+So *nplus* defined different context paths if you have multiple instances:
+
+- sharepointa on `/nscale_spca`
+- sharepointb on `/nscale_spcb`
+- sharepointc on `/nscale_spcc`
+- sharepointd on `/nscale_spcd`
+
+If you only run one instance, it defaults to `/nscale_spc`.
+
+## HA on retrieval
+
+Once archived, you might want to use all instances for retrieval, since they share a common retrieval configuration (same nappl, ...). So in order to gain High Availability even across multiple instances, there are two options:
+
+1. You turn off the services and ingresses on any sharepoint instance but sharepointa. Then you switch sharepointa's service selector to *type mode*, selecting all pods with type `sharepoint` instead of all pods of component `sharepointa`. Then you can access this one service to reach them all.
+2. You can turn on the *clusterService*, which is an additional service that selects all `sharepoint` type pods and then adds an extra ingress on this service with the default context path `nscale_spc`
+
+However, in both scenarios, beware that the sharepoint connector can only service one context path at a time, so you will need to change the context path accordingly.
+
+## Sample for solution 1
+
+On the instance, define the following:
+
+```
+components:
+  # -- First, we switch the default SharePoint OFF
+  sharepoint: false
+
+  # -- Then we enable two sharepoint instances to be used with different configurations
+  sharepointa: true
+  sharepointb: true
+
+sharepointa:
+  service:
+    # -- Switching the service to "type" makes sure we select not only the component pods (in this case all replicas of sharepointa)
+    # but rather **any** pod of type sharepoint.
+    selector: "type"
+  ingress:
+    # -- The default contextPath for sharepointa is `nscale_spca` to make sure we have distinguishable paths for all sharepoint instances.
+    # however, in this case we re-use the service as cluster service and die ingress as cluster ingress, so we switch to the general
+    # contextPath, as if it was a single component deployment
+    contextPath: "/nscale_spc"
+sharepointb:
+  service:
+    # -- The other SP Instance does not need a service any more, as it is selected by the cluster service above. So we switch off the component
+    # service which also switches off the ingress as it would not have a backing service any more
+    enabled: false
+    # -- The default contextPath for sharepointb is `nscale_spcb` to make sure we have distinguishable paths for all sharepoint instances.
+    # however, in this case we re-use the service as cluster service and die ingress as cluster ingress, so we switch to the general
+    # contextPath, as if it was a single component deployment
+    contextPath: "/nscale_spc"
+```
+
+
+## Sample for Solution 2
+
+On the instance, define the following:
+
+```
+components:
+  # -- First, we switch the default SharePoint OFF
+  sharepoint: false
+
+  # -- Then we enable two sharepoint instances to be used with different configurations
+  sharepointa: true
+  sharepointb: true
+
+sharepointa:
+  clusterService:
+    # -- This enabled the cluster service
+    enabled: true
+    # -- the cluster Ingress needs to know the context path it should react on.
+    contextPath: "/nscale_spc"
+  ingress:
+    # -- we turn off the original ingress as the common context path would block the deployment
+    enabled: false
+    # -- The default contextPath for sharepointa is `nscale_spca` to make sure we have distinguishable paths for all sharepoint instances.
+    # however, in this case we re-use the service as cluster service and die ingress as cluster ingress, so we switch to the general
+    # contextPath, as if it was a single component deployment
+    contextPath: "/nscale_spc"
+sharepointb:
+  clusterService:
+    # -- on the second SharePoint Instance, we **disable** the cluster service, as it is already created by sharepointa.
+    enabled: false
+    # -- however, we need to set the context path, as this tells the networkPolicy to open up for ingress even though we switch die Ingress off in the
+    # next step
+    contextPath: "/nscale_spc"
+  ingress:
+    # -- we turn off the original ingress as the common context path would block the deployment
+    enabled: false
+    # -- The default contextPath for sharepointb is `nscale_spcb` to make sure we have distinguishable paths for all sharepoint instances.
+    # however, in this case we re-use the service as cluster service and die ingress as cluster ingress, so we switch to the general
+    # contextPath, as if it was a single component deployment
+    contextPath: "/nscale_spc"
+```
diff --git a/samples/sharepoint/build.sh b/samples/sharepoint/build.sh
new file mode 100755
index 0000000..5fc50b8
--- /dev/null
+++ b/samples/sharepoint/build.sh
@@ -0,0 +1,45 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Set the Variables
+SAMPLE="sharepoint"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/sharepoint/solution2.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+
diff --git a/samples/sharepoint/solution1.yaml b/samples/sharepoint/solution1.yaml
new file mode 100644
index 0000000..5795715
--- /dev/null
+++ b/samples/sharepoint/solution1.yaml
@@ -0,0 +1,28 @@
+components:
+  # -- First, we switch the default SharePoint OFF
+  sharepoint: false
+
+  # -- Then we enable two sharepoint instances to be used with different configurations
+  sharepointa: true
+  sharepointb: true
+
+sharepointa:
+  service:
+    # -- Switching the service to "type" makes sure we select not only the component pods (in this case all replicas of sharepointa)
+    # but rather **any** pod of type sharepoint.
+    selector: "type"
+  ingress:
+    # -- The default contextPath for sharepointa is `nscale_spca` to make sure we have distinguishable paths for all sharepoint instances.
+    # however, in this case we re-use the service as cluster service and die ingress as cluster ingress, so we switch to the general
+    # contextPath, as if it was a single component deployment
+    contextPath: "/nscale_spc"
+sharepointb:
+  service:
+    # -- The other SP Instance does not need a service any more, as it is selected by the cluster service above. So we switch off the component
+    # service which also switches off the ingress as it would not have a backing service any more
+    enabled: false
+  ingress:
+    # -- The default contextPath for sharepointb is `nscale_spcb` to make sure we have distinguishable paths for all sharepoint instances.
+    # however, in this case we re-use the service as cluster service and die ingress as cluster ingress, so we switch to the general
+    # contextPath, as if it was a single component deployment
+    contextPath: "/nscale_spc"
diff --git a/samples/sharepoint/solution2.yaml b/samples/sharepoint/solution2.yaml
new file mode 100644
index 0000000..7212065
--- /dev/null
+++ b/samples/sharepoint/solution2.yaml
@@ -0,0 +1,35 @@
+components:
+  # -- First, we switch the default SharePoint OFF
+  sharepoint: false
+
+  # -- Then we enable two sharepoint instances to be used with different configurations
+  sharepointa: true
+  sharepointb: true
+
+sharepointa:
+  clusterService:
+    # -- This enabled the cluster service
+    enabled: true
+    # -- the cluster Ingress needs to know the context path it should react on.
+    contextPath: "/nscale_spc"
+  ingress:
+    # -- we turn off the original ingress as the common context path would block the deployment
+    enabled: false
+    # -- The default contextPath for sharepointa is `nscale_spca` to make sure we have distinguishable paths for all sharepoint instances.
+    # however, in this case we re-use the service as cluster service and die ingress as cluster ingress, so we switch to the general
+    # contextPath, as if it was a single component deployment
+    contextPath: "/nscale_spc"
+sharepointb:
+  clusterService:
+    # -- on the second SharePoint Instance, we **disable** the cluster service, as it is already created by sharepointa.
+    enabled: false
+    # -- however, we need to set the context path, as this tells the networkPolicy to open up for ingress even though we switch die Ingress off in the
+    # next step
+    contextPath: "/nscale_spc"
+  ingress:
+    # -- we turn off the original ingress as the common context path would block the deployment
+    enabled: false
+    # -- The default contextPath for sharepointb is `nscale_spcb` to make sure we have distinguishable paths for all sharepoint instances.
+    # however, in this case we re-use the service as cluster service and die ingress as cluster ingress, so we switch to the general
+    # contextPath, as if it was a single component deployment
+    contextPath: "/nscale_spc"
diff --git a/samples/sim/README.md b/samples/sim/README.md
new file mode 100644
index 0000000..c483ae3
--- /dev/null
+++ b/samples/sim/README.md
@@ -0,0 +1,87 @@
+# Single-Instance-Mode
+
+If you choose to separate tenants on your system not only by *nplus Instances* but also by *nplus Environments*, thus running each tenant in a separate Kubernetes *Namespace*, you do not need to create an *nplus Environment* first, but you can rather enable the *nplus Environment Components* within your instance:
+
+```yaml
+components:
+  sim:
+    dav: true
+    backend: true
+    operator: true
+    toolbox: true
+```
+
+Steps to run a SIM Instance:
+
+1. Create the namespace and the necessary secrets to access the repo, registry as well as the nscale license file
+
+  ```
+  SIM_NAME="empty-sim"
+
+  kubectl create ns $SIM_NAME
+  kubectl create secret docker-registry nscale-cr \
+    --namespace $SIM_NAME \
+    --docker-server=ceyoniq.azurecr.io \
+    --docker-username=$NSCALE_ACCOUNT \
+    --docker-password=$NSCALE_TOKEN
+  kubectl create secret docker-registry nplus-cr \
+    --namespace $SIM_NAME \
+    --docker-server=cr.nplus.cloud \
+    --docker-username=$NPLUS_ACCOUNT \
+    --docker-password=$NPLUS_TOKEN
+  kubectl create secret generic nscale-license \
+    --namespace $SIM_NAME \
+    --from-file=license.xml=$NSCALE_LICENSE
+  ```
+
+2. Deploy the Instance
+
+  ```
+  helm install \
+    --values lab.yaml \
+    --values single-instance-mode.yaml \
+    --namespace $SIM_NAME \
+    $SIM_NAME nplus/nplus-instance
+  ```
+
+If you do not have any Application that requires assets such as scripts or apps, you are good to go with this.
+
+However, if your Application does require assets, the *problem* is to get them into your (not existing) environment before the Applications is trying to access them.
+
+There are three possible solutions:
+
+1. You create an umbrella chart and have a job installing the assets into your Instance
+2. You pull / download assets from your git server or an asset server before the Application deployment
+3. You pull / download assets from your git server or an asset server before the Component deployment, including the Application
+
+**Solution 1** obiously involes some implementation on your end. That is not covered in this documentation.
+
+**Solution 2** can be achieved by defining a downloader in your application chart (see `empty-download.yaml`):
+
+```yaml
+components:
+  application: true
+application:
+  docAreas:
+    - id: "Sample"
+  download:
+    - "https://git.nplus.cloud/public/nplus/raw/branch/master/samples/assets/sample.sh"
+  run:
+    - "/pool/downloads/sample.sh"
+```
+
+**Solutions 3** should be used if you have any assets that need to be available **before** the nscale Components start, like snippets for the web client etc.
+
+You can use the *Prepper* for that purpose. The *Prepper* prepares everything required for the Instance to work as intended. It is very much like the *Application*, except that it does not connect to any nscale component (as they do not yet run by the time the prepper executes). But just like the Application, the Prepper is able to download assets and run scripts.
+
+You can add this to your deployment:
+
+```yaml
+components:
+  prepper: true
+prepper:
+  download:
+    - "https://git.nplus.cloud/public/nplus/raw/branch/master/assets/sample.tar.gz"
+  run:
+    - "/pool/downloads/sample/sample.sh"
+```
diff --git a/samples/sim/build.sh b/samples/sim/build.sh
new file mode 100755
index 0000000..43cd140
--- /dev/null
+++ b/samples/sim/build.sh
@@ -0,0 +1,46 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Set the Variables
+SAMPLE="sim"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance-sim
+helm template --debug \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/sim/values.yaml \
+     --namespace $NAME \
+     $NAME $CHARTS/instance > $DEST/instance-sim/$SAMPLE.yaml
diff --git a/samples/sim/values.yaml b/samples/sim/values.yaml
new file mode 100644
index 0000000..5d4c43b
--- /dev/null
+++ b/samples/sim/values.yaml
@@ -0,0 +1,7 @@
+components:
+  sim:
+    dav: true
+    backend: true
+    operator: true
+    toolbox: true
+
diff --git a/samples/static/README.md b/samples/static/README.md
new file mode 100644
index 0000000..146f28a
--- /dev/null
+++ b/samples/static/README.md
@@ -0,0 +1,169 @@
+# Static Volumes
+
+## Assigning PVs
+
+For security reasons, you might want to use a storage class that does not perform automatic provisioning of PVs.
+In that case, you want to reference a pre-created volume in the PVC.
+In nplus, you can do so by setting the volumeName in the values.
+
+Please review `values.yaml` as an example:
+
+```yaml
+database:
+  mounts:
+    data:
+      volumeName: "pv-{{ .component.fullName }}-data"
+nstl:
+  mounts:
+    data:
+      volumeName: "pv-{{ .component.fullName }}-data"
+```
+
+You can also set the environment config volume. Please refer to the environment documentation for that.
+
+```
+helm install \
+  --values samples/environment/demo.yaml \
+  --values samples/static/values.yaml
+  sample-static nplus/nplus-instance
+```
+
+## Creating PVs
+
+https://github.com/ceph/ceph-csi/blob/devel/docs/static-pvc.md
+
+### Data Disk:
+
+1. Create a pool on your cep cluster
+   ```
+   ceph osd pool create k-lab 64 64
+   ```
+2. Create a block device pool
+   ```
+   rbd pool init k-lab
+   ```
+3. Create an image
+   ```
+   rbd create -s 50G k-lab/pv-sample-static-database-data
+   rbd create -s 50G k-lab/pv-sample-static-nstl-data
+   rbd ls k-lab | grep pv-sample-static-
+   ```
+   Resize:
+   ```
+   rbd resize --size 50G k-lab/pv-no-provisioner-database-data --allow-shrink
+   ```
+
+### File Share:
+
+1. Create a Subvolume (FS)
+   ```
+   ceph fs subvolume create cephfs pv-no-provisioner-rs-file --size 53687091200
+   ```
+2. Get the path of the subvolume
+   ```
+   ceph fs subvolume getpath  cephfs pv-no-provisioner-rs-file 
+   ```
+
+### Troubleshooting
+
+```
+kubectl describe pv/pv-no-provisioner-rs-file pvc/no-provisioner-rs-file
+kubectl get volumeattachment
+```
+
+### PV Manifests
+
+```yaml
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-no-provisioner-database-data
+spec:
+  accessModes:
+  - ReadWriteOnce
+  capacity:
+    storage: 50Gi
+  csi:
+    driver: rook-ceph.rbd.csi.ceph.com
+    fsType: ext4
+    nodeStageSecretRef:
+      # node stage secret name
+      name: rook-csi-rbd-node
+      # node stage secret namespace where above secret is created
+      namespace: rook-ceph-external
+    volumeAttributes:
+      # Required options from storageclass parameters need to be added in volumeAttributes
+      clusterID: rook-ceph-external
+      pool: k-lab
+      staticVolume: "true"
+      imageFeatures: layering
+      #mounter: rbd-nbd
+    # volumeHandle should be same as rbd image name
+    volumeHandle: pv-no-provisioner-database-data
+  persistentVolumeReclaimPolicy: Retain
+  # The volumeMode can be either `Filesystem` or `Block` if you are creating Filesystem PVC it should be `Filesystem`, if you are creating Block PV you need to change it to `Block`
+  volumeMode: Filesystem
+  storageClassName: ceph-rbd
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-no-provisioner-nstl-data
+spec:
+  accessModes:
+  - ReadWriteOnce
+  capacity:
+    storage: 50Gi
+  csi:
+    driver: rook-ceph.cephfs.csi.ceph.com
+    fsType: ext4
+    nodeStageSecretRef:
+      # node stage secret name
+      name: rook-csi-rbd-node
+      # node stage secret namespace where above secret is created
+      namespace: rook-ceph-external
+    volumeAttributes:
+      # Required options from storageclass parameters need to be added in volumeAttributes
+      clusterID: rook-ceph-external
+      pool: k-lab
+      staticVolume: "true"
+      imageFeatures: layering
+      #mounter: rbd-nbd
+    # volumeHandle should be same as rbd image name
+    volumeHandle: pv-no-provisioner-nstl-data
+  persistentVolumeReclaimPolicy: Retain
+  # The volumeMode can be either `Filesystem` or `Block` if you are creating Filesystem PVC it should be `Filesystem`, if you are creating Block PV you need to change it to `Block`
+  volumeMode: Filesystem
+  storageClassName: ceph-rbd
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-no-provisioner-rs-file
+spec:
+  accessModes:
+  - ReadWriteMany
+  capacity:
+    storage: 50Gi
+  csi:
+    driver: cephfs.csi.ceph.com
+    nodeStageSecretRef:
+      name: rook-csi-cephfs-secret
+      #rook-csi-cephfs-node
+      namespace: rook-ceph-external
+    volumeAttributes:
+      # Required options from storageclass parameters need to be added in volumeAttributes
+      clusterID: rook-ceph-external
+      fsName: cephfs
+      pool: cephfs_data
+      staticVolume: "true"
+      # rootPath kriegt man per ceph fs subvolume getpath  cephfs pv-no-provisioner-rs-file 
+      rootPath: "/volumes/_nogroup/pv-no-provisioner-rs-file/3016f512-bc19-4bfb-8eb2-5118430fbbe5"
+      #mounter: rbd-nbd
+    # volumeHandle should be same as rbd image name
+    volumeHandle: pv-no-provisioner-rs-file
+  persistentVolumeReclaimPolicy: Retain
+  # The volumeMode can be either `Filesystem` or `Block` if you are creating Filesystem PVC it should be `Filesystem`, if you are creating Block PV you need to change it to `Block`
+  volumeMode: Filesystem
+  storageClassName: cephfs
+```
diff --git a/samples/static/build.sh b/samples/static/build.sh
new file mode 100755
index 0000000..88d8218
--- /dev/null
+++ b/samples/static/build.sh
@@ -0,0 +1,48 @@
+#!/bin/bash
+#
+# This sample script builds the example as described. It is also used to build the test environment in our lab,
+# so it should be well tested.
+#
+
+# Make sure it fails immediately, if anything goes wrong
+set -e
+
+# -- ENVironment variables:
+# CHARTS: The path to the source code
+# DEST: The path to the build destination
+# SAMPLE: The directory of the sample
+# NAME: The name of the sample, used as the .Release.Name
+# KUBE_CONTEXT: The name of the kube context, used to build this sample depending on where you run it against. You might have different Environments such as lab, dev, qa, prod, demo, local, ...
+
+# Check, if we have the source code available
+if [ ! -d "$CHARTS" ]; then
+    echo "ERROR Building $SAMPLE example: The Charts Sources folder is not set. Please make sure to run this script with the full Source Code available"
+    exit 1
+fi
+if [ ! -d "$DEST" ]; then
+    echo "ERROR Building $SAMPLE example: DEST folder not found."
+    exit 1
+fi
+if [ ! -d "$CHARTS/instance" ]; then
+    echo "ERROR Building $SAMPLE example: Chart Sources in $CHARTS/instance not found. Are you running this script as a subscriber?"
+    exit 1
+fi
+
+# Set the Variables
+SAMPLE="static"
+NAME="sample-$SAMPLE"
+
+# Output what is happening
+echo "Building $NAME"
+
+# Create the manifest
+mkdir -p $DEST/instance
+helm template --debug \
+     --values $SAMPLES/application/empty.yaml \
+     --values $SAMPLES/environment/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/resources/$KUBE_CONTEXT.yaml \
+     --values $SAMPLES/static/values.yaml \
+     $NAME $CHARTS/instance > $DEST/instance/$SAMPLE.yaml
+# Adding the static PV to the manifest
+echo -e "\n---\n" >> $DEST/instance/$SAMPLE.yaml
+cat $SAMPLES/static/pv.yaml >> $DEST/instance/$SAMPLE.yaml
diff --git a/samples/static/pv.yaml b/samples/static/pv.yaml
new file mode 100644
index 0000000..72900bc
--- /dev/null
+++ b/samples/static/pv.yaml
@@ -0,0 +1,74 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-sample-static-database-data
+spec:
+  # -- set an empty string must be explicitly set otherwise default StorageClass will be set
+  # see https://kubernetes.io/docs/concepts/storage/persistent-volumes/
+  storageClassName: "" 
+  # -- make sure, this PV may only by bound to a specific claim
+  claimRef:
+    name: sample-static-database-data
+    namespace: lab
+  accessModes:
+  - ReadWriteOnce
+  capacity:
+    storage: 50Gi
+  csi:
+    driver: rook-ceph.rbd.csi.ceph.com
+    fsType: ext4
+    nodeStageSecretRef:
+      # node stage secret name
+      name: rook-csi-rbd-node
+      # node stage secret namespace where above secret is created
+      namespace: rook-ceph-external
+    volumeAttributes:
+      # Required options from storageclass parameters need to be added in volumeAttributes
+      clusterID: rook-ceph-external
+      pool: k-lab
+      staticVolume: "true"
+      imageFeatures: layering
+      #mounter: rbd-nbd
+    # volumeHandle should be same as rbd image name
+    volumeHandle: pv-sample-static-database-data
+  persistentVolumeReclaimPolicy: Delete
+  # The volumeMode can be either `Filesystem` or `Block` if you are creating Filesystem PVC it should be `Filesystem`, if you are creating Block PV you need to change it to `Block`
+  volumeMode: Filesystem
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-sample-static-nstl-data
+spec:
+  # -- set an empty string must be explicitly set otherwise default StorageClass will be set
+  # see https://kubernetes.io/docs/concepts/storage/persistent-volumes/
+  storageClassName: "" 
+  # -- make sure, this PV may only by bound to a specific claim
+  claimRef:
+    name: sample-static-nstl-data
+    namespace: lab
+  accessModes:
+  - ReadWriteOnce
+  capacity:
+    storage: 50Gi
+  csi:
+    driver: rook-ceph.rbd.csi.ceph.com
+    fsType: ext4
+    nodeStageSecretRef:
+      # node stage secret name
+      name: rook-csi-rbd-node
+      # node stage secret namespace where above secret is created
+      namespace: rook-ceph-external
+    volumeAttributes:
+      # Required options from storageclass parameters need to be added in volumeAttributes
+      clusterID: rook-ceph-external
+      pool: k-lab
+      staticVolume: "true"
+      imageFeatures: layering
+      #mounter: rbd-nbd
+    # volumeHandle should be same as rbd image name
+    volumeHandle: pv-sample-static-nstl-data
+  persistentVolumeReclaimPolicy: Delete
+  # The volumeMode can be either `Filesystem` or `Block` if you are creating Filesystem PVC it should be `Filesystem`, if you are creating Block PV you need to change it to `Block`
+  volumeMode: Filesystem
+
diff --git a/samples/static/values.yaml b/samples/static/values.yaml
new file mode 100644
index 0000000..f59d2c8
--- /dev/null
+++ b/samples/static/values.yaml
@@ -0,0 +1,22 @@
+database:
+  mounts:
+    data:
+      volumeName: "pv-{{ .component.fullName }}-data"
+nstl:
+  mounts:
+    data:
+      volumeName: "pv-{{ .component.fullName }}-data"
+
+
+# # mon:
+# #   mounts:
+# #     data:
+# #       volumeName: "pv-{{ .component.fullName }}-data"
+# # pipeliner:
+# #   mounts:
+# #     data:
+# #       volumeName: "pv-{{ .component.fullName }}-data"
+# # rs:
+# #   mounts:
+# #     file:
+# #       volumeName: "pv-{{ .component.fullName }}-file"